Description
The GBI To Print plugin for WordPress is vulnerable to Stored Cross-Site Scripting in version 1.0 via the 'div' attribute of the 'gbitoprint' shortcode. This is due to insufficient output escaping in the gbi_toprint_shortcode() function, which concatenates the raw shortcode attribute value directly into an HTML attribute without applying esc_attr() or any other sanitization. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2026-05-27
Score: 6.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

GBI To Print plugin for WordPress version 1.0 contains a stored cross‑site scripting flaw. The gbi_toprint_shortcode() function builds an HTML attribute from the raw 'div' shortcode argument without sanitization, allowing authenticated users with contributor or higher role to embed arbitrary JavaScript that will run in the context of any page containing the edited content. This can be used to hijack user sessions, deface sites, or exfiltrate data.

Affected Systems

Affected systems are WordPress installations that include the GBI To Print plugin, specifically version 1.0. The flaw exists wherever the faulty shortcode is used, regardless of theme or other plugins.

Risk and Exploitability

The CVSS score of 6.4 indicates a moderate severity, and the EPSS score is not available. The vulnerability is not currently listed in the CISA KEV catalog, but the lack of an EPSS value does not preclude potential exploitation. Attackers require authenticated access, typically via the WordPress admin panel, and must have contributor‑level privileges to edit content and insert the malicious shortcode.

Generated by OpenCVE AI on May 27, 2026 at 07:29 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the GBI To Print plugin to the latest available version or remove the plugin if no fixed release is offered.
  • If an update cannot be applied, restrict contributor access or delete existing content that contains the "gbitoprint" shortcode to prevent script execution.
  • Ensure future shortcode usage applies proper sanitization, for example by hooking into shortcode attributes with esc_attr() or equivalent functions to escape all attribute values.

Generated by OpenCVE AI on May 27, 2026 at 07:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 27 May 2026 11:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 27 May 2026 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Garber
Garber gbi To Print
Wordpress
Wordpress wordpress
Vendors & Products Garber
Garber gbi To Print
Wordpress
Wordpress wordpress

Wed, 27 May 2026 06:30:00 +0000

Type Values Removed Values Added
Description The GBI To Print plugin for WordPress is vulnerable to Stored Cross-Site Scripting in version 1.0 via the 'div' attribute of the 'gbitoprint' shortcode. This is due to insufficient output escaping in the gbi_toprint_shortcode() function, which concatenates the raw shortcode attribute value directly into an HTML attribute without applying esc_attr() or any other sanitization. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Title GBI To Print <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'div' Shortcode Attribute
Weaknesses CWE-79
References
Metrics cvssV3_1

{'score': 6.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N'}

Subscriptions

Garber Gbi To Print
Wordpress Wordpress
cve-icon MITRE

Status: PUBLISHED

Assigner: Wordfence

Published:

Updated: 2026-05-27T10:38:51.649Z

Reserved: 2026-05-15T17:47:33.199Z

Link: CVE-2026-8702

cve-icon Vulnrichment

Updated: 2026-05-27T10:38:46.532Z

cve-icon NVD

Status : Received

Published: 2026-05-27T07:16:14.427

Modified: 2026-05-27T07:16:14.427

Link: CVE-2026-8702

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-27T10:07:39Z

Weaknesses