CVE-2026-116520 | buildwps PPWP Plugin up to 1.9.26 on WordPress Shortcode desc_below_form cross site scripting

October 31, 2026 Yanac

A vulnerability was found in buildwps PPWP Plugin up to 1.9.26 on WordPress. It has been declared as problematic. This affects an unknown function of the component Shortcode. Such manipulation of the argument desc_below_form leads to cross site scripting.

This vulnerability is referenced as CVE-2026-116520. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More