CVE-2026-111070 | Content Pilot Plugin up to 2.2.4 on WordPress RSS Campaign parse_meta cross site scripting

October 31, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Content Pilot Plugin up to 2.2.4 on WordPress. Impacted is the function WPCP_Readability::parse_meta of the component RSS Campaign. The manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-111070. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More