Vulnerabilities

TI-2026-85789 CVE-2026-118189 · GHSA-p54m-c67r-w58j

Stored cross-site scripting in Posts Table with Search & Sort plugin

LOW 28

The Posts Table with Search & Sort plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'date_format' parameter in all versions up to, and including, 1.4.14 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00207 Published 2026-11-06 No fix listed CWE-79

TI-2026-29394 CVE-2026-40725 · GHSA-cw6w-c36v-qj74

WordPress WooCommerce Product Filters plugin < 2.0.6 - PHP Object Injection vulnerability

MEDIUM 49

Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00375 Published 2026-06-17 Fixed in 2.0.6 CWE-502

TI-2025-10239 CVE-2025-11174 · GHSA-cq4p-v24g-p55q

Document Library Lite <= 1.1.6 - Missing Authorization to Sensitive Information Exposure

LOW 30

The Document Library Lite plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 1.1.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00377 Published 2025-11-01 No fix listed CWE-285