CVE Feed

    Dashboard / CVE / CVE-2026-88993

    CVE-2026-88993

    The All Bootstrap Blocks WordPress plugin through 1.3.31 does not properly escape a block attribute before outputting it in HTML tag-name position, allowing users with Contributor-level access and above to inject arbitrary web scripts that execute when the affected content is viewed.

    Published:Sep 18, 2026
    Last Modified:Sep 28, 2026
    EPS:Sep 18, 2026
    EPSS Score:0.00431
    CVSS Score:6.8

    Affected Products

    Vendor
    Areoi
    Product
    All Bootstrap Blocks
    Vendor
    Wordpress-extensions
    Product
    All Bootstrap Blocks

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-62036 (CVSS 4.3) — Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in AREOI All Bootstra…
    CVE-2026-88994 (CVSS 6.6) — The All Bootstrap Blocks WordPress plugin through 1.3.31 does not validate a block attribute before using it t…
    CVE-2024-13549 (CVSS 6.4) — The All Bootstrap Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "Accordion"…
    CVE-2024-53824 (CVSS 7.5) — Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner…
    CVE-2024-43349 (CVSS 6.5) — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in all_boot…
    CVE-2024-35169 (CVSS 5.9) — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in all_boot…
    CVE-2023-35047 (CVSS 4.3) — Cross-Site Request Forgery (CSRF) vulnerability in AREOI All Bootstrap Blocks plugin <= 1.3.6 versions.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High