Product Addons < 1.6.15 Unauthenticated Stored XSS via SVG Upload (CVE-2026-12968)

wpscan.com 2026-07-22查看中文 →

Security AdvisoryCVE-2026-12968HighWowAddons

Affected:

Product Addons < 1.6.15

Fixed in:

1.6.15

Referenced CVEs: CVE-2026-12968

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

WowOptin <1.4.38 Unauthenticated Opt-in Deactivation and Template Injection (CVE-2026-14603) 2026-07-24 ProfileGrid Unauthenticated Payment Bypass via PayPal IPN Forgery CVE-2026-12688 2026-07-24 ProfilePress < 4.16.18 Unauthenticated Privilege Escalation via Registration Role Selection 2026-07-24 ProfileGrid Pre-Auth Access Control Bypass: Cross-User Private Message Tampering via Missing Authorization 2026-07-24 ProfileGrid < 5.9.9.7 Pre-Auth Missing Authorization License Tampering 2026-07-24

Offline Archive

Offline screenshot & PDF are Pro-exclusive