A vulnerability labeled as problematic has been found in vektor-inc VK Blocks Plugin up to 1.126.1 on WordPress. Affected by this vulnerability is an unknown functionality of the component Group Block. The manipulation results in cross site scripting. This vulnerability is identified as CVE-2026-78087. The attack can be executed remotely. There is not any exploit available.
WordPress
Exploit
CVE-2026-78087
VulDB
Apply vendor security patch