Vincentastolfi Shortcode Buddy vulnerabilities

• vincentastolfi shortcode buddy Shortcode Buddy <= 0.1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-8897 6.4 MediumMay 27, 2026