TI-2026-05879 CVE-2026-6704 · GHSA-g4p8-grmx-3hm2Blog Settings <= 1.0 - Reflected Cross-Site Scripting via 'page' ParameterPriority LOW 27The Blog Settings plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00211 · Published 2026-05-05 · No fix listed CWE-79