Skip to content
OpenAdvisories
High · 7.1 CVE-2026-112844 EUVD-2026-109246GHSA-99x4-4mmj-pmv9

WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability

Published Oct 24, 2026 · Updated Oct 24, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics WP Event Solution wp-event-solution allows Stored XSS.This issue affects WP Event Solution: from n/a through 4.1.26.

Affected products

VendorProductAffectedFixed
Arraytics WP Event Solution ≤ 4.1.26 —

References