Skip to content
Threat Feed
Subscribe

Product

Breakdance Plugin (<= 2.7.1)

1 brief RSS
high advisory

Stored Cross-Site Scripting Vulnerability in Breakdance WordPress Plugin

The Breakdance plugin for WordPress, in versions up to and including 2.7.1, is susceptible to CVE-2026-7543, a Stored Cross-Site Scripting (XSS) vulnerability via the 'fields' parameter, enabling unauthenticated attackers to inject arbitrary web scripts that execute when users access affected pages, potentially leading to session hijacking, data theft, or defacement.

Breakdance plugin wordpress xss web-application vulnerability
1r 2t 1c