CVE-2026-95817

Name of the Vulnerable Software and Affected Versions DoFollow Case by Case versions prior to 3.6.1

Description The DoFollow Case by Case plugin for WordPress contains a Stored Cross-Site Scripting issue caused by insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts through comment content. While comment moderation may delay the process, the payload executes in the browser of any visitor who accesses the affected post once an administrator approves the comment.

Recommendations Update DoFollow Case by Case to a version newer than 3.6.0.