CVE-2026-94154 | Aurora Heatmap Plugin up to 1.7.2 on WordPress url cross site scripting

October 8, 2026 Yanac

A vulnerability marked as problematic has been reported in Aurora Heatmap Plugin up to 1.7.2 on WordPress. Affected by this vulnerability is an unknown functionality. This manipulation of the argument url causes cross site scripting.

This vulnerability is registered as CVE-2026-94154. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More