CVE-2026-120515 | rainbowgeek SEOPress Plugin up to 10.3 on WordPress Setting Sanitize.php seopress_google_analytics_js cross site scripting

A vulnerability was found in rainbowgeek SEOPress Plugin up to 10.3 on WordPress. It has been rated as problematic. This affects the function seopress_google_analytics_js of the file inc/admin/sanitize/Sanitize.php of the component Setting Handler. The manipulation of the argument seopress_google_analytics_affiliate_tracking/seopress_google_analytics_download_tracking leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-120515. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More