CVE-2026-118983 | VikWidgetsLoader Plugin up to 1.12.2 on WordPress Block Attributes cross site scripting

November 4, 2026 Yanac

A vulnerability identified as problematic has been detected in VikWidgetsLoader Plugin up to 1.12.2 on WordPress. Impacted is an unknown function of the component Block Attributes. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-118983. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More