CVE-2026-57735

Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions.

Score

CVSS 3.1 7.1 High

Status

Deferred - audit@patchstack.com

Published

2026-07-23

Last modified

2026-10-24

Weaknesses

CWE-79

Affected products

• Breakdance (Soflyy)

References

• https://patchstack.com/database/wordpress/plugin/breakdance/vulnerability/wordpress-breakdance-plugin-2-7-1-cross-site-…