LIVE GLOBAL MONITOR: 1 JURISDICTION ACTIVE

Oct 20, 2026 · 17:00 UTC SEARCH

HACKCURRENT Cybersecurity Intelligence

HIGH

Vulnerability intelligence

CVE-2026-78281

Published September 3, 2026

CVSS 3.17.1

SeverityHigh

Known exploitedNo

Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions.

NVD references:

https://patchstack.com/database/wordpress/plugin/audio-and-video-player/vulnerability/wordpress-cp-media-player-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve

Primary source: NIST National Vulnerability Database