Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-120677

1 brief RSS
high advisory

Optimole WordPress Plugin: Stored Cross-Site Scripting (CVE-2026-120677)

The Optimole WordPress plugin (versions up to and including 4.2.18) is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter due to insufficient input sanitization and output escaping.

Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization wordpress xss web-application cve-2026-120677
1c