CVE-2026-94684cross-site-scripting

CVE-2026-94684

published September 23, 2026

CVSS
6.5
EPSS
0%
Percentile
5.8
In the wild
Unconfirmed
What it is

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive detection.

The record
Technical detail
CVSS
6.5 · NONE
CVSS v4.0
Not supplied
EPSS
0.00171 · 5.8th percentile
Published
2026-09-23T23:19Z
EPSS history
Timeline
  • 25 SEP 03:28Z
    EPSS moved — → 0%
    epss
  • 23 SEP 18:14Z
    WordPress Ocean Extra plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability
    cvelistv5