CVE-2026-28130

CVE-2026-28130 is a Reflected XSS in AndonDesign UDesign (u-design) caused by Improper Neutralization of Input During Web Page Generation. Affected: UDesign theme for WordPress, version range n/a through

CVE-2026-28130 WordPress UDesign theme <= 4.14.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign u-design allows Reflected XSS.This issue affects UDesign: from n/a through = 4.14.0...