Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Boopathi Rajan WP Test Email wp-test-email allows Reflected XSS.This issue affects WP Test Email: from n/a through <= 1.1.7.
Published: 2026-01-22
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

This vulnerability is an improper neutralization of input during web page generation, allowing reflected XSS. An attacker can inject malicious scripts that execute in the victim’s browser.

Affected Systems

The affected product is the WordPress WP Test Email plugin released by Boopathi Rajan. All releases up to and including version 1.1.7 are vulnerable; newer releases are not known to be affected.

Risk and Exploitability

The CVSS score of 7.1 indicates a high severity. The EPSS score is less than 1%, indicating the probability of exploitation is currently low, and the issue is not listed in the CISA KEV catalog. The likely attack vector is remote via a crafted HTTP request that provides malicious input to the plugin’s input handling.

Generated by OpenCVE AI on April 29, 2026 at 10:43 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the WP Test Email plugin to a version higher than 1.1.7.
  • If an upgrade is not immediately available, deactivate the plugin to eliminate the vulnerable code path.
  • Implement a content security policy that blocks inline scripts and limits script sources to trusted origins.

Generated by OpenCVE AI on April 29, 2026 at 10:43 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 29 Jan 2026 00:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 23 Jan 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Boopathirajan
Boopathirajan wp Test Email
Wordpress
Wordpress wordpress
Vendors & Products Boopathirajan
Boopathirajan wp Test Email
Wordpress
Wordpress wordpress

Thu, 22 Jan 2026 23:00:00 +0000

Type Values Removed Values Added
Description Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Boopathi Rajan WP Test Email wp-test-email allows Reflected XSS.This issue affects WP Test Email: from n/a through <= 1.1.7.
Title WordPress WP Test Email plugin <= 1.1.7 - Reflected Cross Site Scripting (XSS) vulnerability
Weaknesses CWE-79
References

Subscriptions

Boopathirajan Wp Test Email
Wordpress Wordpress
cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published:

Updated: 2026-04-28T20:43:09.118Z

Reserved: 2025-12-29T11:19:21.661Z

Link: CVE-2025-69102

cve-icon Vulnrichment

Updated: 2026-01-27T15:14:08.161Z

cve-icon NVD

Status : Deferred

Published: 2026-01-22T17:16:23.117

Modified: 2026-04-15T00:35:42.020

Link: CVE-2025-69102

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-29T10:45:09Z

Weaknesses