US
Product
User Submitted Posts – Enable Users to Submit Posts from the Front End
4
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 0
Watch
Add User Submitted Posts – Enable Users to Submit Posts from the Front End to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-0800 | 7.2 | Jan 24 | User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field Affected: through 20251210 |
| CVE-2026-0913 | 6.4 | Jan 16 | User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode Affected: through 20260110 |
| CVE-2026-2126 | 5.3 | Feb 18 | User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter Affected: through 20260113 |
| CVE-2025-2874 | 4.4 | Apr 3 | User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: through 20241026 |
Showing 4
