CVE-2026-93535 | wppool Dark Mode Plugin up to 5.3.17 on WordPress Shortcode icon_light cross site scripting

October 16, 2026 Yanac

A vulnerability labeled as problematic has been found in wppool Dark Mode Plugin up to 5.3.17 on WordPress. This affects an unknown part of the component Shortcode Handler. Executing a manipulation of the argument icon_light can lead to cross site scripting.

This vulnerability is registered as CVE-2026-93535. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More