CVE-2026-120364

WordPress Vidplex plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Published 7 Nov 2026 • Updated 7 Nov 2026

Severity: MEDIUM

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Untapwp Vidplex vidplex allows Stored XSS.This issue affects Vidplex: from n/a through 1.0.3.

Affected products (1)

• Untapwp Vidplex

Problem types

• Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References (1)

• https://patchstack.com/database/wordpress/plugin/vidplex/vulnerability/wordpress-vidplex-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve