wpweaver Weaver Show Posts

• CVE-2026-2121 Medium 4.4 Weaver Show Posts <= 1.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Additional Classes to Wrap Posts' Widget Setting 0.2%
• CVE-2023-1404 Medium 6.4 Weaver Show Posts <= 1.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name 0.5%