CVE-2026-87777 | Hostinger Reach Plugin up to 1.8.2 on WordPress Widget Setting cross site scripting

September 30, 2026 Yanac

A vulnerability classified as problematic has been found in Hostinger Reach Plugin up to 1.8.2 on WordPress. This impacts an unknown function of the component Widget Setting. The manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2026-87777. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More