CVE-2026-111971 | Photo Engine Plugin up to 6.5.7 on WordPress Administrative Dashboard cross site scripting

October 22, 2026 Yanac

A vulnerability classified as problematic has been found in Photo Engine Plugin up to 6.5.7 on WordPress. Affected is an unknown function of the component Administrative Dashboard. Performing a manipulation results in cross site scripting.

This vulnerability was named CVE-2026-111971. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More