CVE-2026-10827

The Spectra Legacy (Ultimate Addons for Gutenberg) WordPress plugin before version 2.20.0 is vulnerable to Stored CSS Injection . The root cause is the failure to validate or escape several block style attributes when building CSS output for the front end. This allows users with the Contributor r...

PT-2026-40617

WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering XSS payloads in design tab textfields. Attackers can inject JavaScript code through fields like 'Text for block toggle' a...