VULNERABILITY INTELLIGENCE

CVE-2026-40791

CVSS score7.1 HIGH

EPSS probability0.21%

CISA KEVNot currently listed

Published2026-06-15

Last modified2026-10-25

Description

Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions.