CVE-2026-15820 | Builderall Plugin up to 3.0.2 on WordPress Photo attributes cross site scripting

September 10, 2026 Yanac

A vulnerability was found in Builderall Plugin up to 3.0.2 on WordPress and classified as problematic. This issue affects some unknown processing of the component Photo Module. Executing a manipulation of the argument attributes can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-15820. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More