Vendor CVEs
WordPress
All CVEs
37,946 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-57626 | Hig | 0.00 | 7.1 | 0.00 | Jul 23, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery. This issue affects MailPoet: from 5.30.0 through 5.33.0. | ||
| CVE-2026-57428 | Hig | 0.00 | 7.1 | 0.00 | Jul 23, 2026 | Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions. | ||
| CVE-2026-57427 | Hig | 0.00 | 7.1 | 0.00 | Jul 23, 2026 | Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions. | ||
| CVE-2026-57425 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions. | ||
| CVE-2026-57397 | Hig | 0.00 | 7.1 | 0.00 | Jul 23, 2026 | Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions. | ||
| CVE-2026-57384 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions. | ||
| CVE-2026-57374 | Hig | 0.00 | 7.1 | 0.00 | Jul 23, 2026 | Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions. | ||
| CVE-2026-57373 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions. | ||
| CVE-2026-57370 | Hig | 0.00 | 7.1 | 0.00 | Jul 23, 2026 | Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 versions. | ||
| CVE-2026-57367 | Hig | 0.00 | 7.1 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions. | ||
| CVE-2026-27423 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions. | ||
| CVE-2026-27422 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in YT Player <= 2.0.9 versions. | ||
| CVE-2026-27418 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions. | ||
| CVE-2026-27403 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from n/a through 1.36.3. | ||
| CVE-2026-27399 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions. | ||
| CVE-2026-27392 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Contributor Broken Access Control in uListing <= 2.2.0 versions. | ||
| CVE-2026-27391 | Med | 0.00 | 5.4 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in uListing <= 2.2.0 versions. | ||
| CVE-2026-27377 | Med | 0.00 | 6.7 | 0.00 | Jul 23, 2026 | Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions. | ||
| CVE-2026-27372 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions. | ||
| CVE-2026-27355 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Ditty <= 3.1.66 versions. | ||
| CVE-2026-27064 | Cri | 0.00 | 9.1 | 0.01 | Jul 23, 2026 | Editor Arbitrary File Upload in Mailster <= 4.1.17 versions. | ||
| CVE-2026-25466 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in WP Go Maps <= 10.1.04 versions. | ||
| CVE-2026-25427 | Med | 0.00 | 5.4 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in eRoom <= 1.7.1 versions. | ||
| CVE-2026-25424 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Contributor Broken Access Control in Mediavine Control Panel <= 2.10.10 versions. | ||
| CVE-2026-25405 | Hig | 0.00 | 8.5 | 0.00 | Jul 23, 2026 | Contributor SQL Injection in eRoom <= 1.7.1 versions. | ||
| CVE-2026-24639 | Med | 0.00 | 4.4 | 0.00 | Jul 23, 2026 | Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions. | ||
| CVE-2026-24628 | Med | 0.00 | 5.9 | 0.00 | Jul 23, 2026 | Administrator Cross Site Scripting (XSS) in Photo Gallery by Supsystic <= 1.16.3 versions. | ||
| CVE-2026-24537 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Accessibility Helper (WAH) <= 0.6.6 versions. | ||
| CVE-2025-68081 | Med | 0.00 | 5.9 | 0.00 | Jul 23, 2026 | Administrator Cross Site Scripting (XSS) in WP-Polls <= 2.77.3 versions. | ||
| CVE-2026-16078 | Med | 0.00 | 6.5 | 0.01 | Jul 23, 2026 | The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9.8 via the 'type' parameter parameter. This makes it possible for authenticated attackers, with shop manager-level access… | ||
| CVE-2026-15906 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient… | ||
| CVE-2026-15827 | Med | 0.00 | 5.3 | 0.01 | Jul 23, 2026 | The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/gutenkit/v1/mailchimp/get/lists and /wp-json/gutenkit/v1/mailchimp/get/interests REST API endpoints in versions up to, and including, 2.4.12.… | ||
| CVE-2026-15794 | Med | 0.00 | 6.4 | 0.00 | Jul 23, 2026 | The Grid/List View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'position' Shortcode Attribute in all versions up to, and including, 3.0.9 due to insufficient input sanitization and output escaping. This makes it possible for… | ||
| CVE-2026-15786 | Med | 0.00 | 4.4 | 0.00 | Jul 23, 2026 | The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.8.6.6 via the 'imploded' parameter parameter. This makes it possible for… | ||
| CVE-2026-15761 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tc_event_filter' parameter in all versions up to, and including, 3.6.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient… | ||
| CVE-2026-15647 | Med | 0.00 | 4.4 | 0.00 | Jul 23, 2026 | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated… | ||
| CVE-2026-15646 | Med | 0.00 | 6.4 | 0.00 | Jul 23, 2026 | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated… | ||
| CVE-2026-15448 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tc_order_status_filter' parameter in all versions up to, and including, 3.6.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient… | ||
| CVE-2026-15404 | Med | 0.00 | 6.4 | 0.00 | Jul 23, 2026 | The Lpagery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.5.7. This is due to insufficient input sanitization and output escaping in the lpagery_add_filter_text_template_post() function, which is hooked to… | ||
| CVE-2026-15394 | Med | 0.00 | 6.4 | 0.00 | Jul 23, 2026 | The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asm_code' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes… | ||
| CVE-2026-15348 | Med | 0.00 | 6.3 | 0.01 | Jul 23, 2026 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 7.0.4 via the `wpdmppdl` parameter. This is due to the `download()` function — hooked to the unauthenticated WordPress `wp`… | ||
| CVE-2026-15017 | Hig | 0.00 | 8.8 | 0.00 | Jul 23, 2026 | The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8.4. This is due to missing capability checks and nonce verification in the `MDJM_Permissions::set_permissions()` and `MDJM_Employee_Manager::init()`… | ||
| CVE-2026-15015 | Cri | 0.00 | 9.8 | 0.01 | Jul 23, 2026 | The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for… | ||
| CVE-2026-15011 | Cri | 0.00 | 9.8 | 0.00 | Jul 23, 2026 | The Customer Support Ticket System & Helpdesk plugin for WordPress is vulnerable to Code Injection via the 'path' parameter in all versions up to, and including, 6.0.5 due to the use of dynamic function invocation on an attacker-controlled value with insufficient validation.… | ||
| CVE-2026-14481 | Med | 0.00 | 6.4 | 0.00 | Jul 23, 2026 | The Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'html' parameter in all versions up to, and including, 1.46.0 due to insufficient input sanitization and output… | ||
| CVE-2026-14282 | Cri | 0.00 | 9.8 | 0.01 | Jul 23, 2026 | The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.12.2. This is due to insufficient file type validation in the… | ||
| CVE-2026-13119 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | The Registrations For The Events Calendar plugin for WordPress is vulnerable to SQL Injection via JSON keys in the 'standard' parameter handled by the rtec_records_edit AJAX action in versions up to and including 3.2. The handler decodes attacker-controlled JSON from… | ||
| CVE-2026-13009 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the… | ||
| CVE-2026-9729 | Med | 0.00 | 6.4 | 0.00 | Jul 23, 2026 | The Webpushr Push Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'webpushr_notification_title' and 'webpushr_notification_body' parameters in versions up to, and including, 4.39.0. This is due to insufficient input sanitization in the… | ||
| CVE-2026-9713 | Hig | 0.00 | 7.5 | 0.00 | Jul 23, 2026 | The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the checkout AJAX action in versions up to, and including, 2.1.1. This is due to insufficient escaping… |
- risk 0.00cvss 7.1epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery. This issue affects MailPoet: from 5.30.0 through 5.33.0.
- risk 0.00cvss 7.1epss 0.00
Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions.
- risk 0.00cvss 7.1epss 0.00
Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions.
- risk 0.00cvss 6.5epss 0.00
Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions.
- risk 0.00cvss 7.1epss 0.00
Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions.
- risk 0.00cvss 6.5epss 0.00
Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions.
- risk 0.00cvss 7.1epss 0.00
Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions.
- risk 0.00cvss 6.5epss 0.00
Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions.
- risk 0.00cvss 7.1epss 0.00
Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 versions.
- risk 0.00cvss 7.1epss 0.00
Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions.
- risk 0.00cvss 4.3epss 0.00
Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in YT Player <= 2.0.9 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions.
- risk 0.00cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from n/a through 1.36.3.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions.
- risk 0.00cvss 4.3epss 0.00
Contributor Broken Access Control in uListing <= 2.2.0 versions.
- risk 0.00cvss 5.4epss 0.00
Subscriber Broken Access Control in uListing <= 2.2.0 versions.
- risk 0.00cvss 6.7epss 0.00
Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions.
- risk 0.00cvss 6.5epss 0.00
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Ditty <= 3.1.66 versions.
- risk 0.00cvss 9.1epss 0.01
Editor Arbitrary File Upload in Mailster <= 4.1.17 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in WP Go Maps <= 10.1.04 versions.
- risk 0.00cvss 5.4epss 0.00
Subscriber Broken Access Control in eRoom <= 1.7.1 versions.
- risk 0.00cvss 4.3epss 0.00
Contributor Broken Access Control in Mediavine Control Panel <= 2.10.10 versions.
- risk 0.00cvss 8.5epss 0.00
Contributor SQL Injection in eRoom <= 1.7.1 versions.
- risk 0.00cvss 4.4epss 0.00
Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions.
- risk 0.00cvss 5.9epss 0.00
Administrator Cross Site Scripting (XSS) in Photo Gallery by Supsystic <= 1.16.3 versions.
- risk 0.00cvss 4.3epss 0.00
Unauthenticated Cross Site Request Forgery (CSRF) in WP Accessibility Helper (WAH) <= 0.6.6 versions.
- risk 0.00cvss 5.9epss 0.00
Administrator Cross Site Scripting (XSS) in WP-Polls <= 2.77.3 versions.
- risk 0.00cvss 6.5epss 0.01
The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9.8 via the 'type' parameter parameter. This makes it possible for authenticated attackers, with shop manager-level access…
- risk 0.00cvss 6.5epss 0.00
The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient…
- risk 0.00cvss 5.3epss 0.01
The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/gutenkit/v1/mailchimp/get/lists and /wp-json/gutenkit/v1/mailchimp/get/interests REST API endpoints in versions up to, and including, 2.4.12.…
- risk 0.00cvss 6.4epss 0.00
The Grid/List View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'position' Shortcode Attribute in all versions up to, and including, 3.0.9 due to insufficient input sanitization and output escaping. This makes it possible for…
- risk 0.00cvss 4.4epss 0.00
The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.8.6.6 via the 'imploded' parameter parameter. This makes it possible for…
- risk 0.00cvss 6.5epss 0.00
The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tc_event_filter' parameter in all versions up to, and including, 3.6.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient…
- risk 0.00cvss 4.4epss 0.00
The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
- risk 0.00cvss 6.4epss 0.00
The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
- risk 0.00cvss 6.5epss 0.00
The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tc_order_status_filter' parameter in all versions up to, and including, 3.6.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient…
- risk 0.00cvss 6.4epss 0.00
The Lpagery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.5.7. This is due to insufficient input sanitization and output escaping in the lpagery_add_filter_text_template_post() function, which is hooked to…
- risk 0.00cvss 6.4epss 0.00
The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asm_code' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes…
- risk 0.00cvss 6.3epss 0.01
The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 7.0.4 via the `wpdmppdl` parameter. This is due to the `download()` function — hooked to the unauthenticated WordPress `wp`…
- risk 0.00cvss 8.8epss 0.00
The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8.4. This is due to missing capability checks and nonce verification in the `MDJM_Permissions::set_permissions()` and `MDJM_Employee_Manager::init()`…
- risk 0.00cvss 9.8epss 0.01
The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for…
- risk 0.00cvss 9.8epss 0.00
The Customer Support Ticket System & Helpdesk plugin for WordPress is vulnerable to Code Injection via the 'path' parameter in all versions up to, and including, 6.0.5 due to the use of dynamic function invocation on an attacker-controlled value with insufficient validation.…
- risk 0.00cvss 6.4epss 0.00
The Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'html' parameter in all versions up to, and including, 1.46.0 due to insufficient input sanitization and output…
- risk 0.00cvss 9.8epss 0.01
The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.12.2. This is due to insufficient file type validation in the…
- risk 0.00cvss 6.5epss 0.00
The Registrations For The Events Calendar plugin for WordPress is vulnerable to SQL Injection via JSON keys in the 'standard' parameter handled by the rtec_records_edit AJAX action in versions up to and including 3.2. The handler decodes attacker-controlled JSON from…
- risk 0.00cvss 6.5epss 0.00
The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…
- risk 0.00cvss 6.4epss 0.00
The Webpushr Push Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'webpushr_notification_title' and 'webpushr_notification_body' parameters in versions up to, and including, 4.39.0. This is due to insufficient input sanitization in the…
- risk 0.00cvss 7.5epss 0.00
The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the checkout AJAX action in versions up to, and including, 2.1.1. This is due to insufficient escaping…
Page 726 of 759