https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T21:36:18.349626+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-88792 CVE-2026-88792 — Dictionary <= 1.0 - Unauthenticated Stored XSS via Direct Dictionary Update 2026-09-28T21:36:18.351381+00:00

Affected: Unknown Dictionary

The Dictionary WordPress plugin through 1.0 does not have authorisation, sanitisation or escaping in place when adding or updating dictionary entries, allowing unauthenticated users to store arbitrary web scripts which will execute when a user views an affected entry.