CVE-2026-109990

The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 1.2.4 . The root cause is insufficient input sanitization and output escaping within the 'comment' parameter. Attackers ...

EUVD-2026-102612

The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for...

WordPress Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Santh in WordPress Plugin Flying Scripts: Delay JavaScript to Improve Site Speed & Performance versions = 1.2.4...