CVE-2026-2837

The CVE-2026-2837 entry describes a Stored Cross-Site Scripting vulnerability in the Ricerca – advanced search WordPress plugin up to version 1.1.12. The issue arises from insufficient input sanitization and output escaping in the plugin’s settings, allowing authenticated users with administrator...