CVE · Medium

CVE-2026-119097 — Improper Neutralization of Input During Web Page Generation

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-119097 Improper Neutralization of Input During Web Page Generation Improper Neutralization of Input During Web Page Generation Medium 6.4 < 4.9.3 4.9.3 2026-11-11 —

CVE-2026-119097 is a Improper Neutralization of Input During Web Page Generation vulnerability in the WordPress plugin sem-author-image (sem-author-image). Versions up to and including 4.9.3 are affected; no patched version is recorded. CVSS score: 6.4 (Medium). Published 2026-11-11.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.