CVE-2026-14835

The SOGO Add Script to Individual Pages Header Footer WordPress plugin, versions through 3.9 , contains a Stored XSS vulnerability. The plugin fails to sanitise or escape custom header/footer script values saved from its post metabox and does not restrict this functionality to users holding the u...

EUVD-2026-68154

The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, and does not restrict them to users with the unfilteredhtml capability, allowing users with contributor-level access a...