CVE-2026-18526

HumHub CE 1.18.4 and 1.18.4-pl1 have a stored XSS flaw in the oEmbed confirmation rendering workflow; the fix is tracked in GitHub PR #8373 (https://github.com/humhub/humhub/pull/8373). No exploitation evidence is provided in the documents.

CVE-2017-18526

The moreads-se plugin before 1.4.7 for WordPress has XSS...

CVE-2019-18526

...

CVE-2019-18526

CVE-2019-18526 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-18526

The moreads-se plugin before 1.4.7 for WordPress has XSS...

CVE-2017-18526

The CVE-2017-18526 affects the WordPress Moreads‑Se plugin prior to version 1.4.7, with a cross‑site scripting (XSS) flaw. The vulnerability concerns the plugin’s handling of input leading to client‑side code execution. No exploit details are provided in the supplied documents. Remediation: upgra...