CVE-2026-87970

The If-So Dynamic Content WordPress plugin versions prior to 1.10.2 is vulnerable to a cross-site scripting (XSS) flaw. The plugin fails to properly escape a request-supplied value before reflecting it in an unauthenticated AJAX response served as HTML. This allows an attacker to execute arbitrar...