CVE-2026-54863— WordPress Review Schema plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability

Quick assessment

Copy summary Copy citation

Affected

Mamunur Rashid Review Schema

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mamunur Rashid 开发的 Review Schema 插件在生成网页时存在输入未正确中和的漏洞（即“跨站脚本攻击”，XSS），可导致反射型跨站脚本攻击（Reflected XSS）。该问题影响 Review Schema 插件从发布之初至版本 3.1.4 的所有版本。

CVE-2026-54863 affects Mamunur Rashid Review Schema. No confirmed in-the-wild exploitation; assess based on exposure. Mamunur Rashid 开发的 Review Schema 插件在生成网页时存在输入未正确中和的漏洞（即“跨站脚本攻击”，XSS），可导致反射型跨站脚本攻击（Reflected XSS）。该问题影响 Review Schema 插件从发布之初至版本 3.1.4 的所有版本。 CVE-2026-54863 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-54863

I. Basic Information for CVE-2026-54863

Affected Products

II. Public POCs for CVE-2026-54863

III. Intelligence Information for CVE-2026-54863

Other References for CVE-2026-54863 (1)

• https://patchstack.com/database/wordpress/plugin/review-schema/vulnerability/wordpress-review-schema-plugin-3-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry

• https://www.cve.org/CVERecord?id=CVE-2026-54863

IV. Related Vulnerabilities