CVE-2026-2422 | ghozylab WP Composer Plugin up to 1.0.5 on WordPress Shortcode cross site scripting

September 19, 2026 Yanac

A vulnerability, which was classified as problematic, was found in ghozylab WP Composer Plugin up to 1.0.5 on WordPress. Affected by this issue is some unknown functionality of the component Shortcode Handler. The manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-2422. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More