CVE-2026-120114

The Debug Log Manager plugin for WordPress (versions up to and including 2.5.2 ) is vulnerable to Unauthenticated Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the message and pageUrl parameters of the log_js_errors AJAX endpoint....