CVE-2026-14565

The advanced-customized-prompts WordPress plugin (versions through 1.0.1 ) is vulnerable to a Stored XSS flaw. The issue arises because the plugin fails to perform necessary capability, ownership, or nonce checks before saving popup configurations to a product, and it fails to escape stored value...