CVE-2026-97397

The Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance WordPress plugin (versions up to and including 1.7 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the comment field. The root cause is insufficient input sanitization and output escaping involving ...