CVE-2026-62082

Deferred Deferred - Pending Action

Unauthenticated XSS in Pin WP

Publication date: 2026-10-10

Last updated on: 2026-10-13

Assigner: Patchstack

Description

Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-10

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-11

EPSS Evaluated

2026-10-18

NVD

CVE-2026-62082

EUVD

EUVD-2026-96490

Affected Vendors & Products

Vendor	Product	Version / Range
An-Themes	Pin	WP n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

This is an Unauthenticated Cross Site Scripting (XSS) vulnerability in the Pin WP WordPress theme versions 7.0 and below. It allows attackers to inject malicious scripts into websites by exploiting flaws in the theme's code. The vulnerability requires user interaction, such as clicking a malicious link, to execute.

Detection Guidance

Check if your WordPress site uses Pin WP theme version 7.0 or below. Inspect web server logs for unusual input patterns or script tags in URLs, forms, or parameters. Use tools like WPScan to scan for vulnerable themes.

Impact Analysis

Attackers could steal visitor data, hijack user accounts, or perform actions on behalf of users. Since it requires user interaction, victims must click a malicious link or submit a form for the attack to succeed. The CVSS score of 7.1 indicates a moderate risk of mass-exploit campaigns.

Compliance Impact

This vulnerability could lead to data breaches, compromising personal or sensitive information. Such breaches may violate GDPR or HIPAA requirements, potentially resulting in legal penalties, fines, or reputational damage for organizations failing to protect user data.

Mitigation Strategies

Apply the Patchstack mitigation rule if available. Update the Pin WP theme to the latest version if a patch is released. Disable the theme temporarily if no update is available. Monitor for suspicious activity and restrict user input handling.

Hi! I’m here to help you understand CVE-2026-62082. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70