CVE-2026-42643 - WordPress Image Widget plugin <= 4.4.11 - Cross Site Scripting (XSS) vulnerability
CVE ID :CVE-2026-42643 Published : April 29, 2026, 12:16 p.m. | 1 hour, 10 minutes ago Description :Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image Widget image-widget allows Stored XSS.This issue affects Image Widget: from
ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD
Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.
GET THE SUNDAY BRIEFING →RELATED · cyber
- [CYBER] Cyber proxy wars escalate as hackers shift to infrastructure targets
- [CYBER] Exploring training platforms alternative to Mimecast for better phishing awareness.
- [CYBER] Phishing emails!
- [CYBER] I built chainscope: reading supply chain attacks across 6 surfaces, one slide at a time
- [CYBER] github failed at the only thing they should do: git
- [CYBER] CVE-2026-5140 - Authorization Bypass in TUBITAK BILGEM's Pardus Update