WordPress Fusion Builder Plugin <= 3.14.1 is vulnerable to Cross Site Scripting (XSS)

Risks

CVSS 6.5

User Interaction Required

While this vulnerability can be initiated by the role shown in “Required Privilege”, successful exploitation requires a privileged user to perform an action — such as clicking a malicious link, visiting a crafted page, or submitting a form.

Threat level: 6.5 out of 10

Cross Site Scripting (XSS)

This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

CVSS score is a way to evaluate and rank reported vulnerabilities in a standardized and repeatable way but which is not ideal for WordPress.

Solutions

This security issue has a low severity impact and is unlikely to be exploited.

Update to version 3.14.2 or later.

Update to version 3.14.2 or later to resolve the vulnerability. Patchstack users can turn on auto-update for vulnerable plugins only.

Source: https://patchstack.com/database/wordpress/plugin/fusion-builder/vulnerability/wordpress-fusion-builder-plugin-3-14-3-cross-site-scripting-xss-vulnerability

WordPress Announces AI Agent Skill For Speeding Up Development

WordPress announced a new AI agent skill that enables AI to test their work as they go to speed up development.

WordPress announced wp-playground, a new AI agent skill designed to be used with the Playground CLI so AI agents can run WordPress for testing and check their work as they write code. The skill helps agents test code quickly while they work.

Playground CLI

Playground is a WordPress sandbox that enables users to run a full WordPress site without setting it all up on a traditional server. It is used for testing plugins, creating and adjusting themes, and experimenting safely without affecting a live site.

The new AI agent skill is for use with Playground CLI, which runs locally and requires knowledge of terminal commands, Node.js, and npm to manage local WordPress environments.

The wp-playground skill starts WordPress automatically and determines where generated code should exist inside the installation. The skill then mounts the code into the correct directory, which allows the agent to move directly from generated code to a running the WordPress site without manual setup.

Once WordPress is running, the agent can test behavior and verify results using common tools. In testing, agents interacted with WordPress through tools like curl and Playwright, checked outcomes, applied fixes, and then re-tested using the same environment. This process creates a repeatable loop where the agent can confirm whether a change works before making further changes.

The skill also includes helper scripts that manage startup and shutdown. These scripts reduce the time it takes for WordPress to become ready for testing from about a minute to only a few seconds. The Playground CLI can also log into WP-Admin automatically, which removes another manual step during testing.

The creator of the AI agent skill, Brandon Payton, is quoted explaining how it works:

“AI agents work better when they have a clear feedback loop. That’s why I made the wp-playground skill. It gives agents an easy way to test WordPress code and makes building and experimenting with WordPress a lot more accessible.”

The WordPress AI agent skill release also introduces a new GitHub repository dedicated to hosting WordPress agent skill. Planned ideas include persistent Playground sites tied to a project directory, running commands against existing Playground instances, and Blueprint generation.

Source: https://www.searchenginejournal.com/wordpress-announces-ai-agent-skill-for-speeding-up-development/566253/

WordPress Publishes AI Guidelines To Combat AI Slop

  • Quality standards do not change with AI
  • Encourages responsible use of AI
  • Low-effort or unverified AI output is explicitly discouraged

WordPress published new AI guidelines to encourage responsible use of AI and ensure that GPL licensing obligations are met.

WordPress published guidelines for using AI for coding plugins, themes, documentation, and media assets. The purpose of the guidelines, guided by five principles, is to keep WordPress contributions transparent, GPL-compatible, and human-accountable, while maintaining high quality standards for AI-assisted work.

The new guidelines lists the following five principles:

  1. “You are responsible for your contributions (AI can assist, but it isn’t a contributor).
  2. Disclose meaningful AI assistance in your PR description and/or Trac ticket comment.
  3. License compatibility matters: contributions must remain compatible with GPLv2-or-later, including AI-assisted output.
  4. Non-code assets count too (docs, screenshots, images, educational materials).
  5. Quality over volume: avoid low-signal, unverified “AI slop”; reviewers may close or reject work that doesn’t meet the bar.”

Transparency

The purpose of the transparency guidelines is to encourage contributors to disclose that AI was used and how it was used so that reviewers can be aware when evaluating the work.

License Compatibility And Tool Choice

Licensing is a big deal with WordPress because it’s designed to be a fully open source publishing platform under the GPLv2 licensing framework. Everything that’s made for WordPress, including plugins and themes, must also be open source. It’s an essential element of everything created with WordPress.

The guidelines specify that AI cannot be used if the output is not licensable under GPLv2.

It also states:

“Do not use tools whose terms forbid using their output in GPL-licensed projects or impose additional restrictions on redistribution.

Do not rely on tools to “launder” incompatible licenses. If an AI output reproduces non-free or incompatible code, it cannot be included.”

AI Slop

Of course, the guidelines address the issue of AI slop. In this case, AI slop is defined as hallucinated references (such as links or APIs that do not exist), overly complicated code where simpler solutions exist, and GitHub PRs that are generic or do not reflect actual testing or experience.

The AI Slop guidelines has recommendations of what they expect from contributors:

“Use AI to draft, then review yourself.

Submit PRs (or patches) that are small, concise and with atomic and well defined commit messages to make reviewing easier.

Run and document real tests.

Link to real Trac tickets, GitHub issues, or documentation that you have verified.”

The guidelines are clear that the WordPress contributors who are responsible for overseeing, reviewing, and deciding whether changes are accepted into a specific part of the project may close or reject contributions that they determine to be AI slop “with little added human insight.”

Takeaways

The new WordPress AI guidelines appear to be about preserving trust in the contribution process as AI becomes more common across development, documentation, and media creation. It in no way discourages the use of AI but rather encourages its use in a responsible manner.

Requiring disclosure, enforcing GPL compatibility, and giving maintainers the authority to reject low-quality submissions, the guidelines set boundaries that protect both the legal integrity of the WordPress project and the time of its reviewers.

Source: https://www.searchenginejournal.com/wordpress-ai-guidelines/566442/

Formidable Forms Flaw Lets Attackers Pay Less For Expensive Purchases

Formidable Forms WordPress flaw enables unauthenticated attackers to pay a small amount and have a more expensive transaction marked as paid.

A vulnerability in the Formidable Forms WordPress plugin installed on over 300,000 websites enables unauthenticated attackers to bypass payment verification. The vulnerability affects all versions up to and including 6.28. It makes it possible for attackers to reuse a Stripe payment made for a lower amount to mark a more expensive transaction as paid.

Formidable Forms Plugin

The Formidable Forms plugin is a drag-and-drop form builder used by WordPress sites to create contact forms, surveys, registration forms, and payment forms. Sites use it with payment processors (like PayPal and Stripe) to collect payments for services, memberships, digital products, and event registrations.

Vulnerable To Unauthenticated Attackers

What makes this vulnerability especially concerning is that it does not require authentication. An attacker does not need to log in or obtain even subscriber-level access to exploit the flaw. This makes it easier for attackers to take advantage of the payment validation weakness.

The vulnerability has been assigned CVE-2026-2890 and carries a CVSS severity score of 7.5/10, which is rated High.

Payment Integrity Bypass

The vulnerability is due to missing validation in the handle_one_time_stripe_link_return_url function. The function marks payment records as complete based solely on the Stripe PaymentIntent status. This makes it possible for attackers to reuse a valid PaymentIntent for a smaller charge to approve a more expensive purchase.

The verify_intent() function validates only that the client secret belongs to the user. It does not bind the PaymentIntent to a specific form submission. It does not verify that the amount charged matches the amount the customer was supposed to pay.

According to Wordfence:

“The Formidable Forms plugin for WordPress is vulnerable to a payment integrity bypass in all versions up to, and including, 6.28. This is due to the Stripe Link return handler (`handle_one_time_stripe_link_return_url`) marking payment records as complete based solely on the Stripe PaymentIntent status without comparing the intent’s charged amount against the expected payment amount, and the `verify_intent()` function validating only client secret ownership without binding intents to specific forms or actions.

This makes it possible for unauthenticated attackers to reuse a PaymentIntent from a completed low-value payment to mark a high-value payment as complete, effectively bypassing payment for goods or services.”

This vulnerability does not enable remote code execution or direct server compromise. But it does enable attackers to obtain goods or services without paying the required price.

Affected Versions And Patch

All versions up to and including 6.28 are affected. Users of the Formidable Forms plugin are encouraged by Wordfence to update to version 6.29 or newer to address the vulnerability.

Source: https://www.searchenginejournal.com/formidable-forms-flaw-lets-attackers-pay-less-for-expensive-purchases/569665/

WordPress Fluent Forms Pro Add On Pack Plugin <= 6.1.17 is vulnerable to Broken Access Control

Threat level: 7.5 out of 10

Broken Access Control

A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action.

CVSS score is a way to evaluate and rank reported vulnerabilities in a standardized and repeatable way but which is not ideal for WordPress.

Solutions

This security issue has a low severity impact and is unlikely to be exploited.

Update to version 6.1.18 or later.

Update to version 6.1.18 or later to resolve the vulnerability. Patchstack users can turn on auto-update for vulnerable plugins only.

Source: https://patchstack.com/database/wordpress/plugin/fusion-builder/vulnerability/wordpress-fusion-builder-plugin-3-14-3-cross-site-scripting-xss-vulnerability

WordPress WP Accessibility Plugin <= 2.3.1 is vulnerable to Cross Site Scripting (XSS)

Risks

CVSS 6.5

User Interaction Required

While this vulnerability can be initiated by the role shown in “Required Privilege”, successful exploitation requires a privileged user to perform an action — such as clicking a malicious link, visiting a crafted page, or submitting a form.

Threat Level: 6.5 out of 10

Cross Site Scripting (XSS)

This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

CVSS score is a way to evaluate and rank reported vulnerabilities in a standardized and repeatable way but which is not ideal for WordPress.

Solutions

This security issue has a low severity impact and is unlikely to be exploited.

Update to version 2.3.2 or later.

Update to version 2.3.2 or later to resolve the vulnerability. Patchstack users can turn on auto-update for vulnerable plugins only.

Source: https://patchstack.com/database/wordpress/plugin/wp-accessibility/vulnerability/wordpress-wp-accessibility-plugin-2-3-1-authenticated-contributor-stored-dom-based-cross-site-scripting-via-alt-attribute-vulnerability

WordPress 6.9.2 and 6.9.3 released on the same day

Oopsie! I wonder if someone discovered a major bug in the few hours between version 6.9.2 and 6.9.3. Or if someone forgot to include a feature or fix in the earlier version. Things like this definitely happen in the software world!

Changelog notes for 6.9.2 can be found at https://wordpress.org/news/2026/03/wordpress-6-9-2-release/ and include at least 10 security fixes.

Changelog notes for 6.9.3 are at https://wordpress.org/news/2026/03/wordpress-6-9-3-and-7-0-beta-4/

Included in the notes:

A few users have subsequently reported an issue where the front end of their site was appearing blank after updating to 6.9.2. The issue has been narrowed down to some themes using an unusual approach to loading template files via “stringable objects” instead of primitive strings for file paths.

Although this is is not an officially supported approach to loading template files in WordPress (the template_include filter only accepts a string), it nevertheless caused some sites to break. As a result, the Security Team has decided to address this in a fast follow 6.9.3 release.

The next planned update will be to WordPress 7.0 on April 9th.

WordPress Genesis Framework Theme <= 3.6.0 is vulnerable to Cross Site Scripting (XSS)

Low priority: No impactful threat

Patched version: 3.6.1

User Interaction Required

While this vulnerability can be initiated by the role shown in “Required Privilege”, successful exploitation requires a privileged user to perform an action — such as clicking a malicious link, visiting a crafted page, or submitting a form.

Threat level: 6.5 out of 10

Cross Site Scripting (XSS)

This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

Source: https://patchstack.com/database/wordpress/plugin/wp-staging-pro/vulnerability/wordpress-wp-staging-pro-plugin-6-1-2-unauthenticated-information-exposure-via-getoutdatedpluginsrequest-function-vulnerability

WordPress Recent Posts Widget Extended Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

Low priority: No impactful threat

No official patch available. If you’re a ProtectYourWP.com subscriber your site will be updated within 24 hrs of a new release.

User Interaction Required

While this vulnerability can be initiated by the role shown in “Required Privilege”, successful exploitation requires a privileged user to perform an action — such as clicking a malicious link, visiting a crafted page, or submitting a form.

Threat level: 6.5 out of 10

Cross Site Scripting (XSS)

This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

Source: https://patchstack.com/database/wordpress/plugin/recent-posts-widget-extended/vulnerability/wordpress-recent-posts-widget-extended-plugin-2-0-2-authenticated-contributor-stored-cross-site-scripting-via-rpwe-shortcode-vulnerability