CVE-2026-66644
Received Received - Intake

Contributor XSS in Typing Effect <= 1.3.7

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Patchstack

Description
Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-18
AI Q&A
2026-08-18
EPSS Evaluated
N/A
NVD
CVE-2026-66644
EUVD
EUVD-2026-60928

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
patchstack typing_effect to 1.3.8 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Cross Site Scripting (XSS) vulnerability in the WordPress Typing Effect Plugin versions 1.3.7 and below. It allows attackers to inject malicious scripts into a website through user interaction, such as clicking a malicious link or visiting a crafted page.

Detection Guidance

To detect this vulnerability, inspect your WordPress plugins for the Typing Effect plugin version 1.3.7 or below. Check for unusual scripts or payloads in web pages where the plugin is active. No specific commands are provided, but manual review of plugin files and web page source code is recommended.

Impact Analysis

If exploited, an attacker could inject malicious scripts that may lead to redirects, unwanted advertisements, or other harmful HTML payloads being executed when visitors access the site. This could compromise the website's integrity and user experience.

Mitigation Strategies

Immediately update the Typing Effect plugin to the latest version if available. If no patch exists, consider disabling or removing the plugin. Contact your hosting provider or web developer for assistance. Monitor your site for suspicious activity or unauthorized changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66644. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart