CVE-2026-77820 | StellarWP WPComplete Plugin up to 2.9.9.0 on WordPress Shortcode empty cross site scripting

September 19, 2026 Yanac

A vulnerability has been found in StellarWP WPComplete Plugin up to 2.9.9.0 on WordPress and classified as problematic. Affected by this issue is some unknown functionality of the component Shortcode Handler. The manipulation of the argument empty leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-77820. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More