CVE-2026-120552 | tigroumeow SEO Engine Plugin up to 0.9.9 on WordPress Output Escaping /wp-json/wp/v2/posts wp_filter_kses title cross site scripting

A vulnerability was found in tigroumeow SEO Engine Plugin up to 0.9.9 on WordPress and classified as problematic. This affects the function wp_filter_kses of the file /wp-json/wp/v2/posts of the component Output Escaping. Executing a manipulation of the argument Title can lead to cross site scripting.

This vulnerability appears as CVE-2026-120552. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More