CVE-2026-65522

A cross-site scripting (XSS) vulnerability exists in the Manual - Documentation, Knowledge Base & Education WordPress Theme versions up to 7.5.4, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to unauthorized actions on behalf of users or the exposure of sensitive information. WordPress site administrators using affected versions should prioritize applying updates to mitigate potential exploitation.