CVE-2026-88993

CVE-2026-88993 is a stored XSS vulnerability in the All Bootstrap Blocks WordPress plugin through version 1.3.31 . The root cause is improper escaping of a block attribute (identified as the areoi/button type attribute) before outputting it in an HTML tag-name position. Users with Contributor-lev...