CVE-2026-104676 | Zion Builder Plugin up to 3.6.17 on WordPress SVG file cross site scripting

November 10, 2026 Yanac

A vulnerability has been found in Zion Builder Plugin up to 3.6.17 on WordPress and classified as problematic. The impacted element is an unknown function of the component SVG file Handler. The manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2026-104676. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More