high8.8
CVE-2026-88792
The Dictionary WordPress plugin through 1.0 does not have authorisation, sanitisation or escaping in place when adding or updating dictionary entries, allowing…
Impact
The Dictionary WordPress plugin through 1.0 does not have authorisation, sanitisation or escaping in place when adding or updating dictionary entries, allowing unauthenticated users to store arbitrary web scripts which will execute when a user views an affected entry.
Affected products
| Product | Affected versions |
|---|---|
| Dictionary WordPress Plugin | through 1.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.