TI-2026-05616 CVE-2026-6399 · GHSA-3hhp-2p2q-gg5w
General Options <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ad_contact_number' Parameter
Priority LOW 20
The General Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.1.0.