specialk User Submitted Posts – Enable Users to Submit Posts from the Front End

• CVE-2026-119162 High 7.2 User Submitted Posts <= 20260916 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user-submitted-content' Parameter via Block-Comment Shortcode Splitting 0.2%
• CVE-2026-2126 Medium 5.3 User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter 0.4%
• CVE-2026-0800 High 7.2 User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field 0.2%
• CVE-2026-0913 Medium 6.4 User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode 0.3%
• CVE-2025-2874 Medium 4.4 User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting 0.2%
• CVE-2023-4779 Medium 6.4 User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%
• CVE-2023-4308 High 7.2 User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content' 0.4%