Vulnerabilities / Action Network
Action Network vulnerabilities
Advisories WPSec published for Organizers Embed – Action Network for WordPress. Other sources may list more. Its attack surface: Action Network on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-10 | WPSEC-2026-0746 | Action Network <= 1.8.5 - Unauthenticated Reflected Cross-Site Scripting via Signup Widget Form Fields | Medium 6.1 | 1.9.0 |
| 2026-10-10 | WPSEC-2026-0745 | Action Network <= 1.8.5 - Cross-Site Request Forgery to Bulk Action Deletion and Hiding | Medium 4.3 | 1.9.0 |
| 2026-10-10 | WPSEC-2026-0744 | Action Network <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via actionnetwork_list and actionnetwork_calendar Shortcode Attributes | Medium 6.4 | 1.9.0 |
License: CC BY 4.0