CVE-2026-88788

Name of the Vulnerable Software and Affected Versions Text Styler versions prior to 1.1.2

Description The Text Styler WordPress plugin fails to sanitize and escape user-supplied styling values before they are output within a front-end style block. Additionally, the plugin does not verify if a user has permission to edit the target post. This allows users with contributor-level access or higher to perform a Stored Cross-Site Scripting (XSS) attack by storing JavaScript that executes in the browser of any user viewing the affected post, including administrators. Cross-Site Scripting (XSS) is a technique where malicious scripts are injected into trusted websites.

Recommendations Update the plugin to a version newer than 1.1.1.