TI-2026-03539 CVE-2026-4084 · GHSA-fm6h-hmg3-46c3
Cross-site scripting in cbednarek fyyd podcast shortcodes
Priority LOW 28
The fyyd podcast shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fyyd-podcast', 'fyyd-episode', and 'fyyd' shortcodes in all versions up to, and including, 0.3.1.