Unrated severityNVD Advisory· Published Oct 7, 2026

CVE-2026-105316

Description

The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions, which are available to unauthenticated users, before reflecting it back in the response, leading to Reflected Cross-Site Scripting.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Magee Shortcodesllm-fuzzy
Range: <=2.1.1
Package: https://wordpress.org/plugins/magee-shortcodes

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/8240033a-bb4b-490f-97da-4ae768d2cb6d/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000