Skip to content
Threat Feed
Subscribe

Product

WordPress Plugin WPZOOM Portfolio <= 1.4.21

1 brief RSS
high advisory

WordPress WPZOOM Portfolio Plugin XSS Vulnerability (CVE-2026-49069)

A critical reflected cross-site scripting (XSS) vulnerability, CVE-2026-49069, affects the WPZOOM Portfolio plugin (version 1.4.21 and earlier) for WordPress, enabling unauthenticated attackers to inject malicious JavaScript into web pages via the `wpzoom_load_more_items` AJAX action, leading to client-side script execution in victims' browsers.

WordPress Plugin WPZOOM Portfolio <= 1.4.21 +1 xss wordpress webapps cve
1r 2t 1c 2i