CVE-2026-19056: Unknown Prosolution Wp Client

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, leading to reflected Cross-Site Scripting that runs in the session of an administrator induced to submit a crafted request.

Affected products

• Unknown Prosolution Wp Client: before 2.0.11 (fixed in 2.0.11)

Published 2026-08-19. Last modified 2026-08-26.