CVE-2026-118800 | kodezen aBlocks Plugin up to 2.18.0 on WordPress headingTag cross site scripting

A vulnerability was found in kodezen aBlocks Plugin up to 2.18.0 on WordPress and classified as problematic. This affects an unknown part. Executing a manipulation of the argument headingTag can lead to cross site scripting.

This vulnerability appears as CVE-2026-118800. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More