CVE-2026-16260

CVE-2026-16260 is a stored cross-site scripting (XSS) vulnerability in the Post Grid, Slider & Carousel Ultimate WordPress plugin, affecting versions before 1.8.1 . The root cause is the failure to sanitise and escape the Header Title field (a custom post type setting) before outputting it in an ...