CVE-2026-82224

SliceWP versions up to 1.2.10 are vulnerable to unauthenticated Cross Site Scripting (XSS), allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a significant risk as it can lead to session hijacking, data theft, or defacement of the affected site. Organizations using these versions should prioritize patching to mitigate potential exploitation.