WordPress itsukaita plugin <= 0.1.2 - Reflected Cross-Site Scripting via 'day_from' Parameter vulnerability

Reflected Cross-Site Scripting via 'dayfrom' Parameter vulnerability discovered by san6051 - PWC in WordPress Plugin itsukaita versions = 0.1.2...

EUVD-2026-14176

The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dayfrom' and 'dayto' parameters in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-2427

The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dayfrom' and 'dayto' parameters in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-2427 itsukaita <= 0.1.2 - Reflected Cross-Site Scripting via 'day_from' Parameter

The itsukaita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dayfrom' and 'dayto' parameters in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-2427

The CVE-2026-2427 issue concerns the itsukaita WordPress plugin. Affected: itsukaita plugin for WordPress. Vulnerability: Reflected Cross-Site Scripting via the day_from and day_to parameters in all versions up to and including 0.1.2, caused by insufficient input sanitization and output escaping....