{"uuid": "63727256-60db-4e00-9ff5-3e1f3291dfe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88788", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117370337559729552", "content": "CVE-2026-88788: Stored XSS in Text Styler WordPress plugin through 1.1.1. Contributors can inject JS that runs for any viewer, admins included. CVSS 6.8, no patch yet. Disable the plugin until it is fixed. https://www.valtersit.com/cve/CVE-2026-88788/ #CVE #WordPress #infosec", "creation_timestamp": "2026-10-02T08:21:51.043096Z"}