CVE-2026-48094

creationtimestamp| type| source ---|---|--- 2026-08-08 11:39:40+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mskydsnxol22...

CVE-2026-48094

The ShareOpenly WordPress plugin prior to version 1.2.1 contains a Cross-Site Scripting vulnerability caused by the absence of WordPress's escurl escaping function on the $url variable before it is rendered into HTML content. This variable is constructed from homeurl addqueryarg array, $wp-reques...