Ffernandobt

Products

Exploited and recent CVEs

• CVE-2026-12434 Medium 4.3 List category posts <= 0.95.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'post_status' Shortcode Attribute 0.4%
• CVE-2026-3005 Medium 6.4 List category posts <= 0.94.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'catlist' Shortcode 0.3%
• CVE-2025-10163 Medium 6.5 List Category Posts <= 0.91.0 - Authenticated (Contributor+) SQL Injection via Plugin's Shortcode 0.3%
• CVE-2025-11377 Medium 4.3 List category posts <= 0.92.0 - Authenticated (Contributor+) Information Exposure 0.2%
• CVE-2024-4356 Medium 6.4 List categories <= 0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
• CVE-2024-1051 Medium 6.4 List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
• CVE-2023-6994 Medium 6.4 List category posts <= 0.89.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%