Stored Cross-Site Scripting Vulnerability in Go Night Pro WordPress Plugin

CVE-2026-1886

What is CVE-2026-1886?

The Go Night Pro plugin for WordPress suffers from a Stored Cross-Site Scripting vulnerability due to inadequate input sanitization and output escaping related to the 'margin' attribute of the 'go-night-pro-shortcode' shortcode. This flaw allows authenticated attackers with contributor-level access or higher to inject malicious scripts on user-accessible pages. When other users visit these compromised pages, the injected scripts are executed, posing potential risks to site security and visitor data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References