Cross-site Scripting Vulnerability in Omnipress Product by Omnipressteam
CVE-2026-25432

Currently unrated

Key Information:

Vendor: WordPress
Status: Omnipress
Vendor: CVE Published:; 19 February 2026

What is CVE-2026-25432?

The Omnipress product by Omnipressteam has a security flaw that allows for Stored Cross-site Scripting (XSS) attacks. This vulnerability arises due to improper neutralization of user input during the web page generation process, enabling attackers to inject malicious scripts that can be executed in the context of a user's session. Affected versions include all releases prior to and including 1.6.7.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch