TI-2026-00485 CVE-2026-0693 · GHSA-f4qw-9xx8-rwgrCross-site scripting in arnoesterhuizen Allow HTML in Category DescriptionsPriority LOW 20The Allow HTML in Category Descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via category descriptions in all versions up to, and including, 1.2.4.CVSS 3.1MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.00276 · Published 2026-02-14 · No fix listed CWE-79