CVE-2026-9710

CVE-2026-9710 affects the premium Cornerstone page builder bundled with the X Theme (WordPress) prior to version 7.8.8. The root cause is a lack of capability checks on a CSS-preview request handler, and the nonce required to invoke that handler is exposed to all logged-in users on any wp-admin p...