CVE-2026-1042 | WP Hello Bar Plugin up to 1.02 on WordPress digit_one/digit_two cross site scripting

A vulnerability, which was classified as problematic, has been found in WP Hello Bar Plugin up to 1.02 on WordPress. The affected element is an unknown function. Performing a manipulation of the argument digit_one/digit_two results in cross site scripting.

This vulnerability was named CVE-2026-1042. The attack may be initiated remotely. There is no available exploit.