CVE-2026-94066 | SpabRice Pond Plugin up to 2.6.1 on WordPress cross site scripting

October 9, 2026 Yanac

A vulnerability, which was classified as problematic, was found in SpabRice Pond Plugin up to 2.6.1 on WordPress. Affected by this issue is some unknown functionality. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2026-94066. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More