CVE-2026-109985

The xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.4.2 . The root cause is insufficient input sanitization and output escaping involving the 'content' parameter . This a...