Vulnerabilities / ElasticPress
ElasticPress vulnerabilities
Advisories WPSec published for ElasticPress. Other sources may list more. Its attack surface: ElasticPress on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-12 | WPSEC-2026-2999 | ElasticPress <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'orderby' Parameter | High 7.2 | 5.3.6 |
License: CC BY 4.0