Vulnerability Bulletins |
CVE-2026-6858 |
|
| Affected software | WORDPRESS |
| The Transbank Webpay WordPress plugin before 1.14.0 does not sanitize and escape logs to be displayed, allowing unauthenticated users to perform Stored XSS attacks against logged in administrator | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-6858 | |