High · 7.1 CVE-2026-42653 EUVD-2026-36361GHSA-36wv-jqc8-m47v

WordPress SliceWP plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Published Jun 11, 2026 · Updated Jun 12, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iova.Mihai SliceWP allows Stored XSS.

This issue affects SliceWP: from n/a through 1.2.6.

Vendor	Product	Affected	Fixed
iova.mihai	SliceWP	≤ 1.2.6	—