CVE-2026-4142

The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Permanent keywords' field in all versions up to and including 1.0. This is due to insufficient input sanitization and output escaping. The plugin reads user input via filter_input_array(INPUT_POST) which applies no HTML sanitization (FILTER_DEFAULT), stores it unsanitized to the WordPress options table via update_option(), and then outputs the stored value directly into a textarea element without any escaping using PHP short echo tags (<?= ?>). An attacker can break out of the textarea element using a closing </textarea> tag and inject arbitrary HTML/JavaScript. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the plugin's settings page.

• CWE-79

• https://plugins.trac.wordpress.org/browser/sentence-to-seo/tags/1.0/index.php#L262
• https://plugins.trac.wordpress.org/browser/sentence-to-seo/tags/1.0/index.php#L50
• https://plugins.trac.wordpress.org/browser/sentence-to-seo/tags/1.0/index.php#L75
• https://plugins.trac.wordpress.org/browser/sentence-to-seo/tags/1.0/index.php#L81
• https://plugins.trac.wordpress.org/browser/sentence-to-seo/tags/1.0/index.php#L87
• https://plugins.trac.wordpress.org/browser/sentence-to-seo/trunk/index.php#L262
• https://plugins.trac.wordpress.org/browser/sentence-to-seo/trunk/index.php#L50
• https://plugins.trac.wordpress.org/browser/sentence-to-seo/trunk/index.php#L75
• https://plugins.trac.wordpress.org/browser/sentence-to-seo/trunk/index.php#L81
• https://plugins.trac.wordpress.org/browser/sentence-to-seo/trunk/index.php#L87
• https://www.wordfence.com/threat-intel/vulnerabilities/id/7d11b2db-d097-433f-923c-f49ef2951c0e?source=cve

Published

Apr 22, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41414Skim is a fuzzy finder designed to through files, lines, and…7.4
• CVE-2026-41415PJSIP is a free and open source multimedia communication lib…9.1
• CVE-2026-41416PJSIP is a free and open source multimedia communication lib…7.5
• CVE-2026-41417Netty allows request-line validation to be bypassed when a `…5.3
• CVE-2026-414184ga Boards is a boards system for realtime project managemen…5.3
• CVE-2026-414194ga Boards is a boards system for realtime project managemen…7.6
• CVE-2026-41421SiYuan is an open-source personal knowledge management syste…8.8
• CVE-2026-41422Daptin is a GraphQL/JSON-API headless CMS. Prior to version …8.3
• CVE-2026-41423Angular is a development platform for building mobile and de…5.3
• CVE-2026-41425Authlib is a Python library which builds OAuth and OpenID Co…5.4
• CVE-2026-41426pretalx is a conference planning tool. Prior to 2026.1.0, an…6.1
• CVE-2026-41427Better Auth is an authentication and authorization library f…6.5