Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #12

WordPress plugin Table Field Add-on hit by stored XSS flaw

Original: 🚨 EUVD-2026-96088 📊 Score: 6.4/10 (CVSS v3.1) 📦 Product: Table Field Add-on for ACF and SCF 🏢 Vendor: jonua 📅 Updated: 2

A stored cross-site scripting vulnerability, tracked as EUVD-2026-96088, has been reported in the Table Field Add-on for ACF and SCF, a WordPress plugin by vendor jonua. The flaw, rated 6.4 out of 10 on the CVSS v3.1 scale, affects table cell content handling in all versions up to the latest, allowing attackers to inject malicious scripts that persist for site visitors.

Why now: Security feeds are flagging the newly updated vulnerability entry, prompting WordPress administrators to check whether their sites use the affected plugin.

Table Field Add-on for ACF and SCFjonuaWordPressEUVD-2026-96088

Open on mastodon →

Evidence

• 🚨 EUVD-2026-96088 📊 Score: 6.4/10 (CVSS v3.1) 📦 Product: Table Field Add-on for ACF and SCF 🏢 Vendor: jonua 📅 Updated: 2026-10-10 📝 The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell Content in all versions up… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1706253