Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: shapedplugin Component: Smart Post Show Clear all filters
TI-2024-03728 CVE-2024-3996 · GHSA-7fp8-7q2p-mmxm

Post Grid, Post Carousel, & List Category Posts < 2.4.28 - Editor+ Stored XSS

Priority MEDIUM 50

The Smart Post Show WordPress plugin before 2.4.28 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfi…

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00331 Published 2025-05-15 Fixed in 2.4.28 CWE-79
TI-2024-07594 CVE-2024-8187 · GHSA-q8vg-jpq8-qfm6

Smart Post Show <= 3.0.0 - Editor+ Stored XSS

Priority MEDIUM 55

The Smart Post Show WordPress plugin before 3.0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfil…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00312 Published 2025-05-15 Fixed in 3.0.1 CWE-79
TI-2023-00093 CVE-2023-0097 · GHSA-8hw8-3xpp-fr77

Post Grid, Post Carousel, & List Category Posts < 2.4.19 - Contributor+ Stored XSS

Priority MEDIUM 58

The Post Grid, Post Carousel, & List Category Posts WordPress plugin before 2.4.19 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could a…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00471 Published 2023-01-30 Fixed in 2.4.19 CWE-79