CVE-2026-18501 | stiofansisland UsersWP Plugin up to 1.2.69 on WordPress Badge Widget cross site scripting

A vulnerability was found in stiofansisland UsersWP Plugin up to 1.2.69 on WordPress. It has been declared as problematic. Affected by this issue is some unknown functionality of the component Badge Widget. The manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-18501. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More