CVE-2021-24619

4.8 mediumEPSS 0.6%

Medium (4.8) in evona per page add to head. EPSS 0.6% chance of exploitation in the next 30 days.

The Per page add to head WordPress plugin through 1.4.4 does not properly sanitise one of its setting, allowing malicious HTML to be inserted by high privilege users even when the unfiltered_html capability is disallowed, which could lead to Cross-Site Scripting issues.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

evona:per_page_add_to_head

References

https://wpscan.com/vulnerability/f360f383-0646-44ca-b49e-e2258dfbf3a6
https://wpscan.com/vulnerability/f360f383-0646-44ca-b49e-e2258dfbf3a6

Check your stack JSON