CVE-2026-3876 | specialk Prismatic Plugin up to 3.7.3 on WordPress Shortcode prismatic_decode cross site scripting

April 16, 2026 Yanac

A vulnerability classified as problematic has been found in specialk Prismatic Plugin up to 3.7.3 on WordPress. Affected is the function prismatic_decode of the component Shortcode Handler. This manipulation causes cross site scripting.

This vulnerability is registered as CVE-2026-3876. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More