CVE-2026-16260 | Post Grid Slider and Carousel Ultimate Plugin up to 1.8.0 on WordPress Setting cross site scripting

August 22, 2026 Yanac

A vulnerability described as problematic has been identified in Post Grid Slider and Carousel Ultimate Plugin up to 1.8.0 on WordPress. The impacted element is an unknown function of the component Setting Handler. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-16260. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More