Cross-Site Scripting Vulnerability in WP Bakery Autoresponder Addon by Kamlesh Yadav
CVE-2026-27363

Currently unrated

Key Information:

Vendor: WordPress
Status: WP Bakery Autoresponder Addon
Vendor: CVE Published:; 5 March 2026

What is CVE-2026-27363?

The WP Bakery Autoresponder Addon, developed by Kamlesh Yadav, is susceptible to Cross-Site Scripting (XSS) attacks due to improper neutralization of input during web page generation. This vulnerability allows attackers to inject malicious scripts, potentially leading to unauthorized access or data theft. Affected versions include all releases through 1.0.6.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch