FE
Vendor
fernandobt
7
CVEs
0
On KEV
0
New 30D
Products
LC6.5
List category posts
fernandobt
6 CVEs0 on KEV0 new
LC6.4
List categories
fernandobt
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-12434 | LC List category posts fernandobt | 4.3 | Jul 16 | List category posts <= 0.95.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'post_status' Shortcode Attribute |
| CVE-2026-3005 | LC List category posts fernandobt | 6.4 | Apr 9 | List category posts <= 0.94.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'catlist' Shortcode |
| CVE-2025-10163 | LC List category posts fernandobt | 6.5 | Dec 11 | List Category Posts <= 0.91.0 - Authenticated (Contributor+) SQL Injection via Plugin's Shortcode |
| CVE-2025-11377 | LC List category posts fernandobt | 4.3 | Nov 1 | List category posts <= 0.92.0 - Authenticated (Contributor+) Information Exposure |
| CVE-2024-4356 | LC List categories fernandobt | 6.4 | May 30 | List categories <= 0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2024-1051 | LC List category posts fernandobt | 6.4 | Mar 30 | List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2023-6994 | LC List category posts fernandobt | 6.4 | Jan 11 | List category posts <= 0.89.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |