CVE-2026-110524
Copy Anything to Clipboard < 5.5.5 - Contributor+ Stored XSS via 'success-text' Shortcode Attribute
CVSS Score
6.8
EPSS Score
0.0%
EPSS Percentile
0th
The Copy Anything to Clipboard for WordPress WordPress plugin before 5.5.5 does not sanitize and escape a shortcode attribute before storing it and writing it back into the page through a client-side script, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks against higher-privileged users who view and interact with the content.
| Vendor | unknown |
| Product | copy anything to clipboard for wordpress |
| Published | Oct 28, 2026 |
| Last Updated | Oct 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown copy anything to clipboard for wordpress
Be the first to know when new medium vulnerabilities affecting unknown copy anything to clipboard for wordpress are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Copy Anything to Clipboard for WordPress
0 < 5.5.5
References
Credits
John Ryan Albon WPScan