Aller au contenu
Se connecter
5.4 Moyenne

CVE-2026-3369 The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Stored Cross-Site Scripting…

Description

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via uploaded image title in versions up to, and including, 1.7.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Produits et versions touchés

Produit Versions touchées Corrigé en
Better Find and Replace – AI-Powered Suggestions 1.7 premières → 1.7.9 Pas de correctif indiqué

Autres CVE de Better Find and Replace – AI-Powered Suggestions

Les 3 CVE de Better Find and Replace – AI-Powered Suggestions →
CVE-2025-9334 The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Limited Code Injection in all… 8.8 Élevée CVE-2025-12360 The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to unauthorized API usage due to… 4.3 Moyenne
Suivre cette CVE