Plugin-Planet / User Submitted Posts
6 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-5002 | User Submitted Posts < 20240516 - Admin+ Stored XSS | MEDIUM | 4.8 | Jul 13, 2024 |
| CVE-2023-45603 | WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload | CRITICAL | 9.8 | Dec 20, 2023 |
| CVE-2023-4779 | User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | MEDIUM | 6.4 | Sep 6, 2023 |
| CVE-2023-4308 | User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content' | HIGH | 7.2 | Aug 15, 2023 |
| CVE-2019-25138 | User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload | CRITICAL | 9.8 | Jun 7, 2023 |
| CVE-2016-11001 | The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field. | MEDIUM | 6.1 | Sep 20, 2019 |
Showing 1 to 6 of 6 CVEs