CVE-2026-119160 | shapedplugin Smart Post Plugin up to 4.0.9 on WordPress display_name cross site scripting

October 31, 2026 Yanac

A vulnerability was found in shapedplugin Smart Post Plugin up to 4.0.9 on WordPress and classified as problematic. Affected is an unknown function. Executing a manipulation of the argument display_name can lead to cross site scripting.

This vulnerability appears as CVE-2026-119160. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More