What is CVE-2026-17161?
This is a Stored Cross-Site Scripting vulnerability in the WowStore plugin for WordPress via the 'filterMobileText' Block Attribute, affecting versions up to 4.4.24. Authenticated users could inject malicious scripts due to insufficient input sanitization. Updating the plugin is recommended.
Azərbaycanca: Bu, WordPress üçün WowStore plaginində aşkarlanmış Stored Cross-Site Scripting (XSS) zəifliyidir. 'filterMobileText' Blok Atributu vasitəsilə autentifikasiya olunmuş istifadəçilər zərərli skript yerləşdirə bilər; 4.4.24 və daha əvvəlki versiyalar təsirlənir. Plaginin ən son versiyaya yenilənməsi tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-79
FAQ2
Which platform and plugin does CVE-2026-17161 affect?
This Stored XSS vulnerability affects the WowStore plugin for WordPress.
Does exploiting this vulnerability require authentication?
Yes, injecting the malicious script requires an authenticated user.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.