Hoosierdragon Text Toggle vulnerabilities

• hoosierdragon text toggle Text Toggle <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute CVE-2026-3997 6.4 MediumMarch 21, 2026