VYPR

AI Builder

by WordPress

CVEs (1)

  • CVE-2026-85678Sep 11, 2026
    risk 0.00cvss epss

    The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tag on the front end, allowing users with contributor level access and above to store arbitrary JavaScript that will execute in the browser of…