Breaking: CVE-2023-49186 - WordPress Machic Core plugin <= 1.2.6 - reflected cross site scripting (xss) vul...

CVE ID : CVE-2023-49186 Published : Jan. 5, 2026, 2:15 p.m. | 50 minutes ago Description : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KlbTheme Machic Core allows DOM-Based XSS.This issue affects Machic Core: from n/a through 1.2.6. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor