CVE-2026-111122 | SiteOrigin CSS Plugin up to 1.6.7 on WordPress Visual Inspector href cross site scripting

October 16, 2026 Yanac

A vulnerability was found in SiteOrigin CSS Plugin up to 1.6.7 on WordPress and classified as problematic. This vulnerability affects unknown code of the component Visual Inspector. Executing a manipulation of the argument href can lead to cross site scripting.

This vulnerability appears as CVE-2026-111122. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More