CVE-2026-85683 - Jane Menu < 1.5.1 - Unauthenticated Stored XSS via Store Config Proxy URL
CVE ID :CVE-2026-85683 Published : Oct. 21, 2026, 9:17 a.m. | 49 minutes ago Description :The Jane Menu WordPress plugin before 1.5.1 does not have any capability or nonce checks on one of its form handlers, which is reachable by unauthenticated users, allowing them to bind any published page...