CVE-2026-66460 — WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vulnerability

CVE-2026-66460

WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vulnerability PUBLISHED

Description (CNA)

Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.

Vendor / product	Versions
AfterShip & Automizely / AfterShip Tracking	affected n/a through 1.18.1

CWE-79

CISA-ADP

No English description supplied.

No references supplied.