PT-2026-31092 · WordPress · Pinterest Site Verification Plugin Using Meta Tag Plugin For Wordpress

Nabil Irawan · Published 2026-04-08 · Updated 2026-04-13 · CVE-2026-3142

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Pinterest Site Verification plugin using Meta Tag plugin for WordPress versions up to and including 1.8

Description The Pinterest Site Verification plugin using Meta Tag plugin for WordPress is susceptible to Stored Cross-Site Scripting through the post var parameter due to inadequate input sanitization and output escaping. Authenticated attackers with subscriber-level access or higher can inject malicious web scripts into pages, which will execute when a user views the compromised page.

Recommendations Update the Pinterest Site Verification plugin using Meta Tag plugin for WordPress to a version newer than 1.8.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-3142

Affected Products

Pinterest Site Verification Plugin Using Meta Tag Plugin For Wordpress

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-3142 · Security Note
• https://plugins.trac.wordpress.org/browser/pinterest-site-verification/tags/1.8/PinterestMetaTagSiteVerification.php#L214 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/7ccb7534-b588-4bdd-9627-0e38c0ee5e8a?source=cve · Note
• https://plugins.trac.wordpress.org/browser/pinterest-site-verification/trunk/PinterestMetaTagSiteVerification.php#L160 · Note
• https://plugins.trac.wordpress.org/browser/pinterest-site-verification/tags/1.8/PinterestMetaTagSiteVerification.php#L172 · Note
• https://t.me/cveNotify/158422 · Telegram Post
• https://plugins.trac.wordpress.org/browser/pinterest-site-verification/tags/1.8/PinterestMetaTagSiteVerification.php#L180 · Note
• https://plugins.trac.wordpress.org/browser/pinterest-site-verification/tags/1.8/PinterestMetaTagSiteVerification.php#L132 · Note
• https://plugins.trac.wordpress.org/browser/pinterest-site-verification/tags/1.8/PinterestMetaTagSiteVerification.php#L92 · Note
• https://plugins.trac.wordpress.org/browser/pinterest-site-verification/tags/1.8/PinterestMetaTagSiteVerification.php#L160 · Note
• https://twitter.com/CVEnew/status/2043561066634805649 · Twitter Post