CVE-2026-88993

CVE-2026-88993 is a Stored XSS in the All Bootstrap Blocks WordPress plugin (versions ≤ 1.3.31). The root cause is improper escaping of the areoi/button type block attribute before it is output in an HTML tag-name position , allowing users with Contributor-level access or above to inject arbitrar...