CVE-2021-36895: Tripetto

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto plugin <= 5.1.4 on WordPress via SVG image upload.

Affected products

• Tripetto Tripetto: up to and including 5.1.4

Published 2022-04-26. Last modified 2026-06-17.