High
WordPress We’re Open! plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability
Type: advisorySource: Official CVE List
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Hearle We’re Open! opening-hours allows Reflected XSS.This issue affects We’re Open!: from n/a through 2.6.
Products: We’re Open!CVEs: CVE-2026-112869