CVE-2026-84815

The Enfold theme for WordPress is vulnerable to a reflected cross-site scripting (XSS) flaw due to improper input neutralization during web page generation. This vulnerability could allow attackers to inject malicious scripts into web pages viewed by users, potentially leading to session hijacking or other malicious activities. Website administrators using Enfold versions up to 8.0 should prioritize patching this issue to protect their users and maintain site integrity.