Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The yootheme WordPress theme before 5.0.35 does not prevent its bundled front-end framework from treating certain HTML attributes, which are permitted by wp_kses_post(), as markup, allowing users with the Author role to perform Stored Cross-Site Scripting attacks that execute in the browser of any user who views the affected post.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
YOOtheme Pro 5.0.0 to 5.0.52 on WordPress: CVE-2026-102785, an unauthenticated file upload, is being exploited (Unit 42, Wordfence). The theme doesn't auto-update. Install 5.0.53 and check wp-content/uploads for .php files you don't know. https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-themes/UNKNOWN-CVE-2026-10077/yootheme-pro-500-5052-unauthenticated-arbitrary-file-upload https://t.co/egJjnnGPGK