What is CVE-2026-28154?
CVE-2026-28154 is a Reflected XSS vulnerability in snstheme's Samex and M.Anh WooCommerce WordPress themes. It could allow an attacker to execute malicious scripts in a user's browser; updating the themes to the latest version is recommended.
Azərbaycanca: CVE-2026-28154, snstheme-in Samex və M.Anh WooCommerce WordPress temalarında aşkarlanmış Reflected XSS zəifliyidir. Bu boşluq təcavüzkara istifadəçi brauzerində zərərli skript icra etməyə imkan verə bilər; temaları ən son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-79
FAQ2
Which WordPress themes are affected by the CVE-2026-28154 vulnerability?
This vulnerability was discovered in snstheme's Samex and M.Anh WooCommerce WordPress themes.
What should be done to protect against the CVE-2026-28154 Reflected XSS vulnerability?
It is recommended to update the affected Samex and M.Anh themes to the latest version.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.