CVE-2026-11570

The User Submitted Posts WordPress plugin (versions before 20260608 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to escape submitted values before they are output in an admin-configured display template. This vulnerability can be triggered by unauthenticated ...