TI-2026-81726 CVE-2026-100175 · GHSA-37r8-fq3j-qq4r
Stored cross-site scripting in Postie plugin for WordPress
Priority LOW 24
The Postie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Email Body URL Autolink in all versions up to, and including, 1.9.87 due to insufficient input sanitization and output escaping.