LC
Product
List category posts
6
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 6Low 0
Watch
Add List category posts to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-10163 | 6.5 | Dec 11 | List Category Posts <= 0.91.0 - Authenticated (Contributor+) SQL Injection via Plugin's Shortcode Affected: through 0.91.0 |
| CVE-2026-3005 | 6.4 | Apr 9 | List category posts <= 0.94.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'catlist' Shortcode Affected: through 0.94.0 |
| CVE-2024-1051 | 6.4 | Mar 30 | List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 0.89.6 |
| CVE-2023-6994 | 6.4 | Jan 11 | List category posts <= 0.89.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 0.89.3 |
| CVE-2026-12434 | 4.3 | Jul 16 | List category posts <= 0.95.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'post_status' Shortcode Attribute Affected: through 0.95.0 |
| CVE-2025-11377 | 4.3 | Nov 1 | List category posts <= 0.92.0 - Authenticated (Contributor+) Information Exposure Affected: through 0.92.0 |
Showing 6