CVE-2026-78293

Unauthenticated Cross Site Scripting (XSS) in WP w3all phpBB <= 3.0.6 versions.

Credits

lanlv - HPT Vietnam Coporation | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/wp-w3all-phpbb-integration/vulnerability/wordpress-wp-w3all-phpbb-plugin-3-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve