CVE-2026-87786 | Dewa Kirim Plugin up to 1.0.0 on WordPress Checkout delivery coordinates cross site scripting

September 17, 2026 Yanac

A vulnerability was found in Dewa Kirim Plugin up to 1.0.0 on WordPress. It has been classified as problematic. The affected element is an unknown function of the component Checkout. The manipulation of the argument delivery coordinates leads to cross site scripting.

This vulnerability is listed as CVE-2026-87786. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More