CVE-2026-8438: All-In-One Security Unauthenticated Stored XSS (CVSS 7.2)

CVE-2026-8438 is a CVSS 7.2 unauthenticated stored XSS in All-In-One Security (AIOS) for WordPress. Attackers can inject scripts that run in an admin's browser.