← All reports

The Website LLMs.txt plugin for WordPress is vulnerable to Cross-Site Scripting attacks due to insufficient input sanitization and output escaping.

CybersecurityTechnologyConflictWordpress PluginsApr 21, 2026score 0.172 posts · 0 replies across 1 instances
The thread discusses two vulnerabilities in the Website LLMs.txt plugin for WordPress, both related to Cross-Site Scripting issues. These vulnerabilities affect all versions up to 8.2.6 and pose security risks to users.

Claims

The Website LLMs.txt plugin for WordPress is vulnerable to Cross-Site Scripting attacks due to insufficient input sanitization and output escaping.
Parent: CybersecurityEntity: WordPress pluginsSub-entity: Website LLMs.txt PluginImpact: negativeDate: Apr 21, 2026Target: The security of WordPress plugins

Source posts

@[email protected]
🚨 EUVD-2026-24072 📊 Score: 4.4/10 (CVSS v3.1) 📦 Product: Website LLMs.txt 🏢 Vendor: ryhowa 📅 Updated: 2026-04-21 📝 The Website LLMs.txt plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24072 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts · 0 favs · 0 replies · Apr 21, 2026
#cybersecurity#infosec#euvd#cve#vulnerability
@[email protected]
🚨 EUVD-2026-24071 📊 Score: 6.1/10 (CVSS v3.1) 📦 Product: Website LLMs.txt 🏢 Vendor: ryhowa 📅 Updated: 2026-04-21 📝 The Website LLMs.txt plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.6. This is due to the use of filter_input() without a sanitization filter and insufficient out... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24071 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts · 0 favs · 0 replies · Apr 21, 2026
#cybersecurity#infosec#euvd#cve#vulnerability