CVE-2026-7613

creationtimestamp| type| source ---|---|--- 2026-05-20 19:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcluegihp2r 2026-05-25 02:12:57+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmnfpf2cmd2i...

CVE-2026-7613

The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csvdata0costofgoodsvalue' parameter in versions up to, and including, 1.2.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacke...