Reflected Cross-Site Scripting Vulnerability in ProSolution WP Client Plugin
CVE-2026-19055
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 19 August 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-19055?
The ProSolution WP Client plugin for WordPress contains a reflected Cross-Site Scripting (XSS) vulnerability that can be exploited by attackers. The issue arises from the plugin's failure to adequately sanitize and escape numerous parameters before incorporating them into HTML attributes on publicly accessible pages. This critical oversight allows malicious users to craft payloads that can execute scripts in the context of any visitor, including logged-in administrators, thereby compromising the security of the site.
Affected Version(s)
ProSolution WP Client 0 < 2.0.11
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.