CVE-2026-92409

The Donation Thermometer WordPress plugin (versions before 2.3.0 ) is vulnerable to a Stored XSS flaw. The root cause is the failure to escape a colour value retrieved from a shortcode attribute before it is used in the attribute of the generated legend markup . This allows users with Contributor...