CVE-2026-1754

Name of the Vulnerable Software and Affected Versions personal-authors-category plugin for WordPress versions up to and including 0.3

Description The personal-authors-category plugin for WordPress is susceptible to Reflected Cross-Site Scripting through the URL path. This is due to inadequate input sanitization and output escaping. An unauthenticated attacker could inject arbitrary web scripts into pages, which would execute if a user is tricked into performing an action, such as clicking a link.

Recommendations Update the personal-authors-category plugin to a version newer than 0.3.