3 matches found
CVE-2026-7509
The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's the-subtitle shortcode before and after attributes in all versions up to, and including, 4.0.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This...
6.4CVSS5.7AI score0.00349EPSS
SaveExploits0References1
CVE-2026-7509
The CVE-2026-7509 affects the WordPress KIA Subtitle plugin (
6.4CVSS6.1AI score0.00349EPSS
SaveExploits0References7
EUVD-2026-31406
The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's the-subtitle shortcode before and after attributes in all versions up to, and including, 4.0.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This...
6.4CVSS6AI score0.00349EPSS
SaveExploits0References7
20