CVE-2026-8167

Name of the Vulnerable Software and Affected Versions THEWP Digital Solutions News Theme V8 versions through 16.06.2026

Description Improper neutralization of input during web page generation leads to a Reflected Cross-Site Scripting (XSS) issue. Reflected XSS occurs when an application includes untrusted data in a web page without proper validation or encoding, allowing an attacker to execute malicious scripts in the victim's browser.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.