Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

UsersWP <= 1.2.69 Stored XSS via Badge Widget (CVE-2026-18501) Advisory

www.wordfence.com 2026-08-06 查看中文 →

Security Advisory CVE-2026-18501 Medium UsersWP

Affected:

UsersWP <= 1.2.69

Fixed in:

1.2.70

Referenced CVEs: CVE-2026-18501 · 6.4

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

WordPress Gutenberg Blocks Plugin Remote Code Execution (RCE) Vulnerability Analysis and PoC 2026-10-02 No External Links v1.0.0 Unauthenticated Stored XSS via Log URL PoC 2026-10-02 MultiVendorX <= 10.1.08 Auth Bypass SQLi with POC 2026-10-02 Download Monitor <= 4.10 Unauthenticated Stored XSS via postMessage 2026-10-02 WordPress Koko AI Page Builder Unauthenticated Redirect Vulnerability (CVE-2024-3188-3203) Advisory 2026-10-02

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro