digiblogger BuddyHolis ListSearch

• CVE-2026-1853 Medium 6.4 BuddyHolis ListSearch <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'placeholder' Shortcode Attribute 0.3%