Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-9577— Post Status Notifier Lite < 1.13.0 - Reflected XSS via mod Parameter

Quick assessment

Affected
Unknown Post Status Notifier Lite
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

ifeelweb post status notifier lite是ifeelweb个人开发者开源的一款文章状态通知插件。 ifeelweb post status notifier lite 1.13.0之前版本存在跨站脚本漏洞，该漏洞源于未正确转义 URL参数，导致反射型跨站脚本漏洞，管理员被诱导访问特制URL时可能触发漏洞。

AI Predicted 6.1 Difficulty: Moderate EPSS 0.24% · P14

Possible ATT&CK Techniques 1 AI

T1189 · Drive-by Compromise

Affected Version Matrix 1

VendorProduct Version RangeStatus
Unknown Post Status Notifier Lite < 1.13.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-9577

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Post Status Notifier Lite < 1.13.0 - Reflected XSS via mod Parameter
Source: CVE Program / CVE List V5
Vulnerability Description
The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the `mod` URL parameter before reflecting it into the admin settings page (`admin.php?page=post-status-notifier-lite`), leading to a Reflected Cross-Site Scripting vulnerability that fires in the administrator's session when they are tricked into following a crafted URL.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
ifeelweb post status notifier lite 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ifeelweb post status notifier lite是ifeelweb个人开发者开源的一款文章状态通知插件。 ifeelweb post status notifier lite 1.13.0之前版本存在跨站脚本漏洞，该漏洞源于未正确转义`mod` URL参数，导致反射型跨站脚本漏洞，管理员被诱导访问特制URL时可能触发漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Unknown Post Status Notifier Lite 0 ~ 1.13.0 -

II. Public POCs for CVE-2026-9577

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-9577

请登录查看更多情报信息。

Other References for CVE-2026-9577 (1)

Same Patch Batch · Unknown · 2026-07-23 · 4 CVEs total

CVE-2026-12082 Praison AI SEO < 5.0.7 - Unauthenticated Multiple Missing Authorization (Post Permalink Mo
CVE-2026-9066 WP Compress < 7.10.04 - Reflected XSS via test_zone
CVE-2026-14291 Security Ninja (Premium) < 5.290 - Two-Factor Authentication Bypass via secnin_skip_2fa

IV. Related Vulnerabilities

Same product: Post Status Notifier Lite
Same vendor: Unknown

V. Comments for CVE-2026-9577

No comments yet

Leave a comment