TI-2025-10537 CVE-2025-11501 · GHSA-4mjg-854j-xw2w
Dynamically Display Posts <= 1.1 - Unauthenticated SQL Injection
Priority LOW 39
The Dynamically Display Posts plugin for WordPress is vulnerable to SQL Injection via the 'tax_query' parameter in all versions up to, and including, 1.1 due to insufficient escaping on the user supplied parameter and la…