CVE-2026-15386

The CVE concerns the Meow Gallery WordPress plugin prior to version 5.5.2. The vulnerability arises because the plugin does not escape an attachment’s alt text before outputting it into an attribute of the link for linked galleries, enabling stored cross-site scripting (XSS) via the alt-text fiel...