CVE-2026-10077

creationtimestamp| type| source ---|---|--- 2026-07-02 07:53:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnkhkvusl2g 2026-07-02 20:05:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpotdw4dge26...

CVE-2026-10077

The yootheme WordPress theme before version 5.0.35 contains a Stored Cross-Site Scripting (XSS) vulnerability. The issue arises because the theme's bundled front-end framework treats certain HTML attributes—which are permitted by the wp_kses_post() function—as markup. This allows users with the A...