CVE-2026-14845 in NewStatPress Plugin
Сводка
по MITRE • 31.07.2026
The NewStatPress WordPress plugin before 1.4.5 does not sanitise and escape data derived from unauthenticated visitor requests before storing it and later outputting it in one of its widgets, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against users viewing the affected widget.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.