CVE-2026-81765
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
An unauthenticated Cross Site Scripting (XSS) vulnerability in Tailored Tools versions up to and including 3.0.2.
Risk Assessment
An attacker can inject malicious script into the page, potentially leading to data theft or session hijacking.
Recommendation
Update the Tailored Tools plugin to the latest version that includes a fix for this vulnerability.
Other vulnerabilities in Tailored Tools
See all- CVE-2026-62025Critical
The Tailored Tools plugin in versions up to and including 3.0.3 contains an unauthenticated arbitrary file upload vulnerability. The lack of required authorization allows exploitation without an account in the application.
- CVE-2026-111401Medium
The Tailored Tools plugin for WordPress contains a Cross-Site Request Forgery (CSRF) vulnerability that allows forcing unintended actions on behalf of a logged-in user. This issue affects Tailored Tools versions up to and including 3.0.3.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in Tailored Tools <= 3.0.2 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS