CVE-2026-66448 WordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.3 versions...

CVE-2026-66448

WordPress Gallery PhotoBlocks plugin ≤ 1.3.3 has a Cross Site Scripting (XSS) vulnerability in contributor contexts. Affected product: Gallery PhotoBlocks plugin for WordPress (versions up to 1.3.3). Root cause details are not provided in the documents. CVSSv3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:...