CVE-2026-16068

The Brizy WordPress plugin vulnerable to stored XSS (CVE-2026-16068) affects versions before 2.8.19. Authenticated users with Author-level access or higher can modify site-global design data and, due to incomplete sanitisation, store arbitrary JavaScript that is served unsanitised on front-end pa...