User Submitted Posts – Enable Users to Submit Posts from the Front End vulnerabilities

Product

User Submitted Posts – Enable Users to Submit Posts from the Front End

by specialk · last CVE Feb 18, 2026

CVEs

On KEV

7.2

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 3Low 0

Severity

Exploitation

Watch

Add User Submitted Posts – Enable Users to Submit Posts from the Front End to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-0913	6.4	0%	Jan 16	User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode Affected: through 20260110
CVE-2026-2126	5.3	0%	Feb 18	User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter Affected: through 20260113
CVE-2025-2874	4.4	0%	Apr 3	User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: through 20241026