Skip to content
Threat Feed
Subscribe

Vendor

Flying Images

1 brief RSS
high advisory

Flying Images: Stored Cross-Site Scripting (CVE-2026-119175)

The Flying Images WordPress plugin version 2.4.15 and earlier contains a stored XSS vulnerability in the comment parameter, allowing unauthenticated attackers to execute arbitrary scripts after comment approval.

Flying Images: Optimize and Lazy Load Images for Faster Page Speed xss web-application wordpress cve-2026-119175
2t 1c