CVE-2026-10083Disclosure

LOWCVSS 7.5 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The APCu Manager WordPress plugin before 4.5.0 does not escape APCu object-cache keys before rendering them in an admin-area page, leading to a Stored Cross-Site Scripting vulnerability. When a persistent object cache is enabled, cache keys derived from unsanitised user input (e.g. a transient name created by another APCu Manager WordPress plugin before 4.5.0 from an unauthenticated request) are output without escaping and execute arbitrary JavaScript in the session of an administrator viewing the page.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://wpscan.com/vulnerability/e591b3f3-6e21-44f7-b374-4753689532fe/

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets4 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-10083 The APCu Manager WordPress plugin before 4.5.0 does not escape APCu object-cache keys before rendering them in an admin-area page, leading to a Stored Cross-Site Scri… https://www.cve.org/CVERecord?id=CVE-2026-10083 ----- Traducción: CVE-2026-10083 El … http://infoflow.cloud`
Post summary
The message announces CVE-2026-10083, describing a stored XSS flaw in the APCu Manager plugin, but provides no PoC, exploit code, active exploitation evidence, or mitigation guidance.
0001028
89 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-10083 The APCu Manager WordPress plugin before 4.5.0 does not escape APCu object-cache keys before rendering them in an admin-area page, leading to a Stored Cross-Site Scri… https://www.cve.org/CVERecord?id=CVE-2026-10083
Post summary
The entry reports a stored XSS vulnerability in the APCu Manager WordPress plugin (versions prior to 4.5.0) caused by non‑escaped object‑cache keys rendered in an admin page.
00000745
57.7K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds91d
Disclosure
CVE-2026-10083 Stored Cross-Site Scripting in APCu Manager WordPress Plugin Befo... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10083 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The post announces a stored XSS vulnerability (CVE-2026-10083) in the APCu Manager WordPress Plugin with a link to vulnerability details, but provides no PoC, exploit code, active exploitation evidence, patch information, or false‑positive claim.
00000105
4.1K followersView on X

Explore more

Back to dashboard