CVE-2026-13726

The Multiple Page Generator (MPG) WordPress plugin, specifically versions before 4.1.8 , is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape a parameter before it is reflected back in the response. This allows unauthenticated attac...