S4E just found a critical-severity finding from cve-2026-109618 php2shell scanner (version based)
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
CVE

CVE-2011-4618

4.3
CVSS
Description

Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Attack Vector
-
Privileges Req.
-
User Interaction
-
Updated Oct 12, 2026View on NVD →
S4E scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →