Read the docs

fernandobt

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

fernandobt records in CISA KEV

No fernandobt vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2025-09329 CVE-2025-10163 · GHSA-pr3g-4gg4-m5r6

List Category Posts <= 0.91.0 - Authenticated (Contributor+) SQL Injection via Plugin's Shortcode

Priority LOW 29

The List category posts plugin for WordPress is vulnerable to time-based SQL Injection via the ‘starting_with’ parameter of the catlist shortcode in all versions up to, and including, 0.91.0 due to insufficient escaping…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00322 Published 2025-12-11 No fix listed CWE-89
TI-2024-00972 CVE-2024-1051 · GHSA-gw3m-hx6j-h3r6

List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The List category posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catlist' shortcode in all versions up to, and including, 0.89.6 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00446 Published 2024-03-30 No fix listed CWE-79
TI-2026-02594 CVE-2026-3005 · GHSA-qp6x-q6f7-3wq4

List category posts <= 0.94.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'catlist' Shortcode

Priority LOW 28

The List category posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catlist' shortcode in all versions up to, and including, 0.94.0 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00282 Published 2026-04-09 No fix listed CWE-79
TI-2026-10670 CVE-2026-12434 · GHSA-w939-c8qp-6hm2

Missing authorization in fernandobt List category posts

Priority LOW 20

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitize_status.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00406 Published 2026-07-16 No fix listed CWE-862
TI-2025-10424 CVE-2025-11377 · GHSA-gx4w-f9jp-mv56

List category posts <= 0.92.0 - Authenticated (Contributor+) Information Exposure

Priority LOW 19

The List category posts plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 0.92.0 via the 'catlist' shortcode due to insufficient restrictions on which posts can be included.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00228 Published 2025-11-01 No fix listed CWE-200
Open these records in search →