← All reports

WordPress plugins are vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes.

CybersecurityWordpressApr 22, 2026score 0.173 posts · 0 replies across 1 instances
The thread reports multiple vulnerabilities in WordPress plugins, specifically Stored Cross-Site Scripting issues due to insufficient input sanitization and output escaping. These vulnerabilities affect several plugins and versions, posing a security risk to users.

Claims

WordPress plugins are vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes.
Parent: CybersecurityEntity: WordPress pluginsImpact: negativeDate: Apr 22, 2026Target: WordPress plugins are vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes.

Source posts

@[email protected]
🚨 EUVD-2026-24704 📊 Score: 6.4/10 (CVSS v3.1) 📦 Product: Simple Random Posts Shortcode 🏢 Vendor: mkerstner 📅 Updated: 2026-04-22 📝 The Simple Random Posts Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'container_right_width' attribute of the 'simple_random_posts' shortcode in all versions up to, and including, 0.3 due to insu... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24704 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts · 0 favs · 0 replies · Apr 22, 2026
#cybersecurity#infosec#euvd#cve#vulnerability
@[email protected]
🚨 EUVD-2026-24702 📊 Score: 6.4/10 (CVSS v3.1) 📦 Product: Posts map 🏢 Vendor: lucdecri 📅 Updated: 2026-04-22 📝 The Posts map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' shortcode attribute in all versions up to, and including, 0.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This mak... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24702 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts · 0 favs · 0 replies · Apr 22, 2026
#cybersecurity#infosec#euvd#cve#vulnerability
@[email protected]
🚨 EUVD-2026-24694 📊 Score: 6.4/10 (CVSS v3.1) 📦 Product: SlideShowPro SC 🏢 Vendor: luetkemj 📅 Updated: 2026-04-22 📝 The SlideShowPro SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `slideShowProSC` shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24694 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts · 0 favs · 0 replies · Apr 22, 2026
#cybersecurity#infosec#euvd#cve#vulnerability