CVE-2026-7543

The Breakdance plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'fields' parameter, affecting versions up to 2.7.1, due to inadequate input sanitization and output escaping. This vulnerability allows unauthenticated attackers to inject malicious scripts, which can execute in the browsers of users accessing compromised pages. WordPress site administrators using this plugin should prioritize patching to mitigate potential exploitation risks.