Login Request a demo
US
Product
User Submitted Posts – Enable Users to Submit Posts from the Front End
by specialk · last CVE Feb 18, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 1Medium 5Low 0
Severity
All severities7Critical1High1Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add User Submitted Posts – Enable Users to Submit Posts from the Front End to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-25138
9.8
2%
Jun 7
User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload
Affected: before 20190426
CVE-2026-0800
7.2
0%
Jan 24
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field
Affected: through 20251210
CVE-2026-0913
6.4
0%
Jan 16
User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode
Affected: through 20260110
CVE-2023-4779
5.4
0%
Sep 6
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 20230811
CVE-2023-4308
5.4
0%
Aug 15
User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'
Affected: through 20230809
CVE-2026-2126
5.3
0%
Feb 18
User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter
Affected: through 20260113
CVE-2025-2874
4.4
0%
Apr 3
User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting
Affected: through 20241026
Showing 7