Stored Cross-Site Scripting Vulnerability in Orange Confort+ Accessibility Toolbar for WordPress

CVE-2026-1808

What is CVE-2026-1808?

The Orange Confort+ accessibility toolbar for WordPress is affected by a vulnerability that allows stored cross-site scripting through insufficient input sanitization and output escaping. Authenticated attackers with Contributor-level access or higher can exploit this flaw by injecting arbitrary web scripts via the 'style' parameter of the ocplus_button shortcode. This risk leads to the potential execution of malicious scripts whenever a user accesses impacted pages, posing a significant security threat to WordPress sites utilizing this plugin.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References