CVE-2026-120575 | tigroumeow Photo Engine Plugin up to 6.5.7 on WordPress Input Sanitization hierarchy[].name cross site scripting

November 3, 2026 Yanac

A vulnerability was found in tigroumeow Photo Engine Plugin up to 6.5.7 on WordPress. It has been classified as problematic. This vulnerability affects unknown code of the component Input Sanitization. The manipulation of the argument hierarchy[].name leads to cross site scripting.

This vulnerability is traded as CVE-2026-120575. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More