CVE-2026-87793: Developers Italia Design-Scuole-WordPress-Theme

Medium severity, CVSS 5.1. EPSS: 0.5% chance of exploitation in the next 30 days.

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter.

Affected products

• Developers Italia Design-Scuole-WordPress-Theme: from 1.0, up to and including 2.18.2

Published 2026-09-15. Last modified 2026-09-18.