MEDIUM
Zahlan
CVE published 2026-04-15
CVE-2026-40734
A Cross-site Scripting (XSS) vulnerability exists in the Categories Images plugin for WordPress, affecting versions from n/a through 3.3.1. This issue allows for DOM-Based XSS. Defenders responsible for WordPress installations with the Categories Images plugin should assess exposure and prioritize patching or mitigation to prevent potential XSS attacks. The vulnerability has a CVSS score of 6.5 and is cla [truncated]