CVE-2026-2030

CVE-2026-2030: The WPBakery Page Builder Addons by Livemesh plugin for WordPress (versions up to 3.9.4) is vulnerable to Stored Cross-Site Scripting via the lvca_carousel and lvca_posts_carousel shortcode attributes. Root cause: insufficient input sanitization and output escaping, with shortcode ...