PT-2026-66389

Name of the Vulnerable Software and Affected Versions WP Real IP-based Access Control versions prior to 1.3.2 Description The plugin fails to perform capability or nonce checks before storing option values and does not escape these values on the settings page. This leads to Stored Cross-Site...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS. This happens because no HTML escaping is being performed when processing quotes. This applies even when the :escapehtml option was being used in combination with :quote. Details Cross-site scripting or XSS is a...