CVE-2026-4074 | karim42 Quran Live Multilanguage Plugin up to 1.0.3 on WordPress Shortcode quran-live.php quran_live_render cross site scripting

April 22, 2026 Yanac

A vulnerability labeled as problematic has been found in karim42 Quran Live Multilanguage Plugin up to 1.0.3 on WordPress. Affected by this issue is the function quran_live_render of the file quran-live.php of the component Shortcode Handler. The manipulation results in cross site scripting.

This vulnerability was named CVE-2026-4074. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More