CVE-2026-13726

CVE-2026-13726 affects the MPG WordPress plugin prior to version 4.1.8. The vulnerability stems from inadequate sanitisation/escaping of a parameter that is reflected back in the response, enabling unauthenticated attackers to perform Reflected Cross‑Site Scripting when a victim is coaxed into se...