CVE-2026-9677

The Shariff for WordPress plugin (versions prior to 1.0.12 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The issue exists because the plugin fails to sanitize or escape the shariff_infourl setting before it is rendered in the frontend HTML via the generateshariff() function. This flaw al...