CVE-2026-15796 | Builderall Plugin up to 3.0.2 on WordPress Setting bg_video_service_url cross site scripting

September 10, 2026 Yanac

A vulnerability has been found in Builderall Plugin up to 3.0.2 on WordPress and classified as problematic. This vulnerability affects unknown code of the component Setting Handler. Performing a manipulation of the argument bg_video_service_url results in cross site scripting.

This vulnerability was named CVE-2026-15796. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More