CVE-2026-2602 | Twentig Supercharged Block Editor Plugin up to 1.9.7 on WordPress Parameter featuredImageSizeWidth cross site scripting

A vulnerability, which was classified as problematic, has been found in Twentig Supercharged Block Editor Plugin up to 1.9.7 on WordPress. This affects an unknown part of the component Parameter Handler. This manipulation of the argument featuredImageSizeWidth causes cross site scripting.

This vulnerability appears as CVE-2026-2602. The attack may be initiated remotely. There is no available exploit.