CVE-2026-4125 | wpmkorg WPMK Block Plugin up to 1.0.1 on WordPress Shortcode wpmk_block_shortcode cross site scripting

April 22, 2026 Yanac

A vulnerability was found in wpmkorg WPMK Block Plugin up to 1.0.1 on WordPress. It has been declared as problematic. This vulnerability affects the function wpmk_block_shortcode of the component Shortcode Handler. The manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-4125. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More