VYPR

Islamic Database

by WordPress

CVEs (1)

  • CVE-2026-8845MedMay 27, 2026
    risk 0.42cvss 6.4epss

    The Islamic Database plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'islamicDB-roqya' shortcode in versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user-supplied 'width' and 'height' shortcode…