CVE-2026-120671 | stiofansisland UsersWP Plugin up to 1.2.80 on WordPress Input Sanitization badge cross site scripting

November 6, 2026 Yanac

A vulnerability marked as problematic has been reported in stiofansisland UsersWP Plugin up to 1.2.80 on WordPress. This affects an unknown part of the component Input Sanitization. This manipulation of the argument badge causes cross site scripting.

This vulnerability is registered as CVE-2026-120671. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More