CVE-2026-1903

The Ravelry Designs Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'layout' attribute of the 'sbravelrydesigns' shortcode in all versions up to, and including, 1.0.0. This is due to insufficient input sanitization and output escaping on user supplied attributes...

CVE-2026-1903

CVE-2026-1903 (Reserved entry) has concrete detail in connected document: WordPress plugin Ravelry Designs Widget <= 1.0.0 is affected by an Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability via the sb_ravelry_designs shortcode layout attribute. Impact: stored XSS could be...