CVE-2026-2512 | dartiss Code Embed Plugin up to 2.5.1 on WordPress AJAX Endpoint sec_check_post_fields cross site scripting

A vulnerability, which was classified as problematic, was found in dartiss Code Embed Plugin up to 2.5.1 on WordPress. This issue affects the function sec_check_post_fields of the component AJAX Endpoint. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-2512. The attack can be launched remotely. No exploit exists.