CVE-2026-104726 | jeroenpeters1986 Name Directory Plugin up to 1.34.2 on WordPress Shortcode dir cross site scripting

October 16, 2026 Yanac

A vulnerability categorized as problematic has been discovered in jeroenpeters1986 Name Directory Plugin up to 1.34.2 on WordPress. This vulnerability affects unknown code of the component Shortcode Handler. Such manipulation of the argument dir leads to cross site scripting.

This vulnerability is documented as CVE-2026-104726. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More