CVE-2026-119160 — Smart Post

The Smart Post WordPress plugin is vulnerable to stored cross-site scripting (Stored XSS) through the 'display_name' parameter in all versions up to and including 4.0.9.