Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The Wueen plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `wueen-blocket` shortcode in all versions up to, and including, 0.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
CVE-2026-1569 The Wueen plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `wueen-blocket` shortcode in all versions up to, and including, 0.2.0 due t… https://www.cve.org/CVERecord?id=CVE-2026-1569
Post summary
The Wueen WordPress plugin (v 0.2.0 and earlier) suffers from a stored XSS flaw triggered by its `wueen‑blocket` shortcode, as documented in CVE‑2026‑1569.
CVE-2026-1569 Stored Cross-Site Scripting in Wueen WordPress Plugin via Shortcode Attribute https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1569
Post summary
CVE-2026-1569 describes a stored XSS vulnerability in the Wueen WordPress plugin involving a shortcode attribute. The notice links to Vulmon for more details but does not mention exploitation, patches, or PoC code.