CVE-2026-107757 | tigroumeow Gallery Custom Links Plugin up to 2.3.3 on WordPress Display Name profile.php display_name cross site scripting

October 14, 2026 Yanac

A vulnerability described as problematic has been identified in tigroumeow Gallery Custom Links Plugin up to 2.3.3 on WordPress. This affects an unknown function of the file profile.php of the component Display Name Handler. Such manipulation of the argument display_name leads to cross site scripting.

This vulnerability is listed as CVE-2026-107757. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More