CVE-2026-121796 | Add From Server Lite Plugin up to 5.x on WordPress SVG file cross site scripting

November 7, 2026 Yanac

A vulnerability was found in Add From Server Lite Plugin up to 5.x on WordPress. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component SVG file Handler. Performing a manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-121796. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More