CVE-2026-97470 | mefic Tourfic Plugin up to 3.0.1 on WordPress Comment Content /wp-json/wp/v2/comments content cross site scripting

October 16, 2026 Yanac

A vulnerability labeled as problematic has been found in mefic Tourfic Plugin up to 3.0.1 on WordPress. The affected element is an unknown function of the file /wp-json/wp/v2/comments of the component Comment Content. The manipulation of the argument content results in cross site scripting.

This vulnerability is cataloged as CVE-2026-97470. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More