CVE-2026-6725 | wpclever WPC Smart Messages for WooCommerce Plugin up to 4.2.8 on WordPress wpcsm_text_rotator text cross site scripting

A vulnerability identified as problematic has been detected in wpclever WPC Smart Messages for WooCommerce Plugin up to 4.2.8 on WordPress. Affected by this issue is the function wpcsm_text_rotator. The manipulation of the argument text leads to cross site scripting.

This vulnerability is documented as CVE-2026-6725. The attack can be initiated remotely. There is not any exploit available.