CVE-2026-92396

The ShopEngine Gutenberg WooCommerce Builder Blocks Addon WordPress plugin, prior to version 2.4.4 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The issue stems from an AJAX action that fails to validate user capabilities or post ownership, combined with a failure to escape stored ...