A vulnerability classified as problematic was found in bplugins Services Section Block Plugin up to 1.4.4 on WordPress. This affects an unknown part. Such manipulation leads to cross site scripting. This vulnerability is documented as CVE-2026-11402 . The attack can be executed remotely. There is not any exploit available.