TI-2026-00511 CVE-2026-0724 · GHSA-vw5r-3jjm-rpxq
Cross-site scripting in wecodify WPlyr Media Block
Priority LOW 20
The WPlyr Media Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_wplyr_accent_color' parameter in all versions up to, and including, 1.3.0 due to insufficient input sanitization and outpu…