CVE-2026-96840 | wpxpo Post Grid Gutenberg Blocks Plugin up to 5.1.0 on WordPress Output Escaping Archive_Title.php display_name cross site scripting

October 10, 2026 Yanac

A vulnerability, which was classified as problematic, was found in wpxpo Post Grid Gutenberg Blocks Plugin up to 5.1.0 on WordPress. Affected by this vulnerability is an unknown functionality of the file Archive_Title.php of the component Output Escaping. Executing a manipulation of the argument display_name can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-96840. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More