CVE-2026-12980

The Post Snippets WordPress plugin, affecting versions through 4.2.4 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly escape variable values substituted into snippets before they are outputted to the page. This flaw allows users with Contributor rol...