CVE-2026-8042

creationtimestamp| type| source ---|---|--- 2026-05-27 09:53:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtaf7ne3f2e...

CVE-2026-8042

The CVE concerns the WordPress plugin “Github Shortcode.” All versions up to 0.1 are affected by a Stored Cross-Site Scripting (Stored XSS) in the github shortcode via the repo attribute due to insufficient input sanitization and output escaping. An authenticated attacker with Contributor-level a...