US
Product
User Submitted Posts
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 4Low 0
Watch
Add User Submitted Posts to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-45603 | 9.8 | Dec 20 | WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload Affected: through 20230902 |
| CVE-2019-25138 | 9.8 | Jun 7 | User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload Affected: through 20190312 |
| CVE-2016-11001 | 6.1 | Sep 20 | The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field Affected: before 20160215 |
| CVE-2023-4779 | 5.4 | Sep 6 | User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 20230811 |
| CVE-2023-4308 | 5.4 | Aug 15 | User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content' Affected: before 20230811 |
| CVE-2024-5002 | 4.8 | Jul 13 | User Submitted Posts < 20240516 - Admin+ Stored XSS Affected: before 20240516 |
Showing 6
