CVE-2026-15889

Name of the Vulnerable Software and Affected Versions Aruba HiSpeed Cache plugin for WordPress versions prior to 3.0.15

Description Insufficient input sanitization and output escaping allow authenticated attackers with Contributor-level access and above to perform Stored Cross-Site Scripting (XSS). This occurs via the Post Content, enabling the injection of arbitrary web scripts into pages that execute when accessed by other users.

Recommendations Update the plugin to version 3.0.15 or later.