CVE-2026-42653

The CVE-2026-42653 entry concerns the WordPress SliceWP plugin (affected: SliceWP n/a through 1.2.6) with a Stored Cross-Site Scripting vulnerability described as “Improper neutralization of input during web page generation.” The issue is described consistently across sources (NVD, CVE list, CVEL...

CVE-2026-42653 WordPress SliceWP plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iova.Mihai SliceWP allows Stored XSS. This issue affects SliceWP: from n/a through 1.2.6...

CVE-2024-47388 WordPress SliceWP Affiliates plugin <= 1.1.18 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SliceWP allows Reflected XSS.This issue affects SliceWP: from n/a through 1.1.18...