PT-2026-54972 · Designthemes+1 · Kids Life | Children School Wordpress+1

João Pedro S Alcântara + 1 · CVE-2026-27402 · Published 2026-06-30 · Updated 2026-07-09

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Kids Life | Children School WordPress versions prior to 5.3

Description Stored Cross-Site Scripting (XSS) occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which execute when a user accesses the affected page.

Recommendations Update Kids Life | Children School WordPress to a version newer than 5.2.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-27402

Affected Products

Kids Life | Children School Wordpress

Kidslife

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-27402 · Security Note
• https://reddit.com/r/StopBadBots/comments/1us1z36/wordpress_cyber_apocalypse_88_unpatched_flaws · Reddit Post
• https://wordfence.com/threat-intel/vulnerabilities/id/e826dcb4-7a92-43d9-a8ca-403b20521c5e?source=api-prod · Note
• https://patchstack.com/database/wordpress/theme/kidslife/vulnerability/wordpress-kids-life-children-school-wordpress-theme-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27402 · Note