CVE-2026-11570

The User Submitted Posts WordPress plugin (versions before 20260608 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to escape submitted values before outputting them in an admin-configured display template , specifically involving the Author Name . This flaw can...