https://feed.craftedsignal.io/vendors/nickboss/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 01 Nov 2026 16:57:24 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-11-wordpress-file-upload-xss/Sun, 01 Nov 2026 16:57:24 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-wordpress-file-upload-xss/The Nickboss WordPress File Upload plugin (up to version 5.2.1) is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation.<p>The WordPress File Upload plugin (wp-file-upload) by Nickboss is affected by a Stored Cross-Site Scripting (XSS) vulnerability, tracked as CVE-2026-66570. This issue is caused by the improper neutralization of input during web page generation and affects the plugin from version n/a through 5.2.1.</p> highadvisory