CVE-2026-2718 | Dealia Plugin up to 1.0.6 on WordPress Gutenberg Block wp_kses cross site scripting

A vulnerability marked as problematic has been reported in Dealia Plugin up to 1.0.6 on WordPress. This issue affects the function wp_kses of the component Gutenberg Block Handler. This manipulation causes cross site scripting.

This vulnerability is registered as CVE-2026-2718. Remote exploitation of the attack is possible. No exploit is available.