Skip to content

Justin Nealey Designsetgo vulnerabilities

justin nealey designsetgoDesignSetGo <= 2.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block AttributeCVE-2026-1110684.4 MediumOctober 28, 2026
justin nealey designsetgoWordPress DesignSetGo plugin <= 2.8.0 - PHP Object Injection vulnerabilityCVE-2026-946838.8 HighSeptember 30, 2026