CVE-2026-8489: Improper Neutralization of Input During Web Page Generation

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'aboutme' parameter in all versions up to, and including, 2.11.4 due to insufficient input sanitization and...

WS-2023-0215

Potential XSS in content script via StackOverflow aboutme in GitHub repository getalby/lightning-browser-extension prior to 2.0.2...