CVE-2026-106933 | Blaze Demo Importer Plugin up to 1.0.16 on WordPress SVG File cross site scripting

October 19, 2026 Yanac

A vulnerability identified as problematic has been detected in Blaze Demo Importer Plugin up to 1.0.16 on WordPress. The affected element is an unknown function of the component SVG File Handler. This manipulation causes cross site scripting.

This vulnerability appears as CVE-2026-106933. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More