A vulnerability labeled as problematic has been found in WPBookit Plugin up to 1.0.8 on WordPress. Impacted is an unknown function. The manipulation of the argument wpb_user_name/wpb_user_email results in cross site scripting.
This vulnerability is known as CVE-2026-1945. It is possible to launch the attack remotely. No exploit is available.
