DLX Plugins CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM DLX Plugins CVE published 2026-10-12

CVE-2026-108168

A Cross Site Scripting (XSS) vulnerability exists in the WordPress Custom Query Blocks plugin versions up to 5.6.0. This issue, known as CVE-2026-108168, was published on October 12, 2026, and has a CVSS score of 6.5, categorized as MEDIUM severity. The vulnerability allows for Stored XSS due to improper neutralization of input during web page generation.