CVE-2026-127115

The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.10.6 . The root cause is insufficient input sanitization and output escaping regarding the buddyforms_form_content parameter. This flaw allows unauthenticated attackers to inje...