CVE-2026-103478 | codename065 Premium Packages Plugin up to 7.2.6 on WordPress phone/state/taxid/email cross site scripting

October 10, 2026 Yanac

A vulnerability was found in codename065 Premium Packages Plugin up to 7.2.6 on WordPress. It has been classified as problematic. The affected element is an unknown function. Performing a manipulation of the argument phone/state/taxid/email results in cross site scripting.

This vulnerability is cataloged as CVE-2026-103478. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More