CVE-2026-78290

WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.6 versions.

We have discovered 314 live websites that are affected by CVE-2026-78290.

Run a Free Instant Scan



Affected Software

Product  Magazine Blocks
Category Wordpress Plugins
Vulnerable Domains314 live websites (100% of Magazine Blocks install base)
Vulnerable Versions
  • from 0 through 1.8.6
Vulnerable Versions Count19 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')



Details

  • Published - Aug 24, 2026
  • Updated - Aug 24, 2026

Credits

  • sungbyeongchan | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-78290
United States87 websites


Cyprus30 websites
Brazil26 websites
Poland22 websites
Germany19 websites
Italy13 websites
Turkey11 websites
France11 websites
India10 websites
GB8 websites

Website Distribution by TLD

Number of websites using CVE-2026-78290
.com143 websites
.com.br29 websites
.pl17 websites
.org11 websites
.it10 websites
.net6 websites
.fr6 websites
.de5 websites
.ru5 websites
.dk3 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-78290

Top websites that are affected by CVE-2026-78290. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*************.com United States***,***
*****.at Austria***,***
*******.se Sweden***,***
*******************.com United States*,***,***
****.net United States*,***,***
**********.***.br Brazil*,***,***
**********.dk United States*,***,***
*****.com Germany*,***,***
***************.***.br Brazil*,***,***
*******.***.in India*,***,***
See full domain list

FAQ

CVE-2026-78290 is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Magazine Blocks
A total of 314 websites have been identified as vulnerable to CVE-2026-78290, based on global website indexing conducted by WebTechSurvey.
The Magazine Blocks is affected by the CVE-2026-78290 vulnerability.
Magazine Blocks versions up to and including 1.8.6 are vulnerable to CVE-2026-78290.