WordPress Security Bulletin: ZoomifyWP Free Plugin Vulnerability (CVE-2026-1187)
Security Alert Summary The ZoomifyWP Free plugin for WordPress contains a stored Cross-Site Scripting (XSS) vulnerability in the zoomify shortcode’s filename parameter. Authenticated users with Contributor-level access and above can…
Read security notice