CVE-2026-15249

The CVE-2026-15249 entry affects the Patterns Kit WordPress plugin up to version 1.0.3. The vulnerability arises because the plugin does not escape a link attribute before its client-side script inserts it into the page, enabling a stored XSS payload. This payload can be triggered when a viewer w...