Read the docs

wpqode

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

wpqode records in CISA KEV

No wpqode vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-10772 CVE-2026-12560 · GHSA-c3mc-8j5j-vh28

Editorial Rating <= 4.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Link URL' Field

Priority LOW 21

The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field in all versions up to, and including, 4.0.5 due to insufficient input sanitizat…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00386 Published 2026-06-30 No fix listed CWE-79
TI-2024-09760 CVE-2024-10536 · GHSA-8mxh-w9w9-hrmg

Missing authorization in wpqode FancyPost – Post Blocks, Grids & Sliders for Block Editor…

Priority LOW 20

The FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_b…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00274 Published 2025-01-07 No fix listed CWE-862
Open these records in search →