PT-2026-115417

The Dark Mode – Improve Accessibility with AI Powered Dark Theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'icon light' Shortcode Attribute in all versions up to, and including, 5.3.17 due to insufficient input sanitization and output escaping. This makes it possib...

WordPress Dark Mode Cross-Site Script Vulnerability

WordPress Dark Mode 5.3.17 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper input cleaning and insufficient output escaping through the 'icon-light' short-code attribute, which may lead to storage-based cross-site scripting attacks...