TI-2026-00777 CVE-2026-1042 · GHSA-4hcf-mq88-ff2w
Cross-site scripting in norcross WP Hello Bar
Priority LOW 20
The WP Hello Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'digit_one' and 'digit_two' parameters in all versions up to, and including, 1.02 due to insufficient input sanitization and outp…