UNKNOWN NVD

CVE-2026-17010

The Saitama Addon Pack WordPress plugin through 1.0.8 does not sanitise and escape certain post metadata values before outputting them, allowing users with cont

The Saitama Addon Pack WordPress plugin through 1.0.8 does not sanitise and escape certain post metadata values before outputting them, allowing users with contributor-level access and above to inject stored Cross-Site Scripting payloads that execute in the browser of a higher-privileged user who reviews the content.

References

https://wpscan.com/vulnerability/1e760dbf-7efc-4511-9a05-2d1476eb3dfb/

Published: 2026-08-10 · Source: NVD · Feed updated: 2026-08-10

This unknown severity vulnerability was published on 2026-08-10 via NVD.

vulnfeed aggregates 9044 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.