Noah Hearle - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/noah-hearle/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 24 Oct 2026 10:12:06 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgWe’re Open! Plugin: Reflected Cross-site Scripting (CVE-2026-112869)https://feed.craftedsignal.io/briefs/2026-10-cve-2026-112869/Sat, 24 Oct 2026 10:12:06 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-cve-2026-112869/The Noah Hearle We’re Open! opening-hours plugin contains an Improper Neutralization of Input During Web Page Generation vulnerability, resulting in Reflected Cross-site Scripting.<p>The Noah Hearle We’re Open! opening-hours plugin, in versions from n/a through 2.6, is affected by a Reflected Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.</p> mediumadvisory