CVE-2026-97020

The PO/MO Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 1.4.2 . The root cause is insufficient input sanitization and output escaping of the 'podata' parameter. An authenticated attacker with subscriber-level access or higher can in...