CVE-2026-5077 | hashthemes Total Plugin up to 2.2.1 on WordPress Home Page Blog Section the_title cross site scripting

A vulnerability classified as problematic was found in hashthemes Total Plugin up to 2.2.1 on WordPress. This vulnerability affects the function the_title of the component Home Page Blog Section. Such manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-5077. The attack can be executed remotely. There is not any exploit available.