WordPress Security Bulletin: Wikiloops Track Player plugin Vulnerability (CVE-2026-1611)
Security Alert Summary The Wikiloops Track Player plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in its wikiloops shortcode. Insufficient input sanitization and output escaping of user-supplied shortcode…
Read security notice