CVE-2026-103480 | themefic Tourfic Plugin up to 3.0.1 on WordPress Output Escaping wp_kses_post type cross site scripting

October 16, 2026 Yanac

A vulnerability marked as problematic has been reported in themefic Tourfic Plugin up to 3.0.1 on WordPress. The impacted element is the function wp_kses_post of the component Output Escaping. Performing a manipulation of the argument Type results in cross site scripting.

This vulnerability is identified as CVE-2026-103480. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More