CVE-2026-110524 Copy Anything to Clipboard < 5.5.5 - Contributor+ Stored XSS via 'success-text' Shortcode Attribute

The Copy Anything to Clipboard for WordPress WordPress plugin before 5.5.5 does not sanitize and escape a shortcode attribute before storing it and writing it back into the page through a client-side script, which could allow users with the contributor role and above to perform Stored Cross-Site...

CVE-2026-110524

The Copy Anything to Clipboard for WordPress plugin (versions before 5.5.5 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to sanitize and escape a shortcode attribute (specifically the 'success-text' attribute) before it is stored and subsequently rendered vi...