Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: fernandobt Clear all filters
TI-2026-10670 CVE-2026-12434 · GHSA-w939-c8qp-6hm2

Missing authorization in fernandobt List category posts

Priority LOW 20

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitize_status.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00406 Published 2026-07-16 No fix listed CWE-862
TI-2026-02594 CVE-2026-3005 · GHSA-qp6x-q6f7-3wq4

List category posts <= 0.94.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'catlist' Shortcode

Priority LOW 28

The List category posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catlist' shortcode in all versions up to, and including, 0.94.0 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00282 Published 2026-04-09 No fix listed CWE-79
TI-2025-09329 CVE-2025-10163 · GHSA-pr3g-4gg4-m5r6

List Category Posts <= 0.91.0 - Authenticated (Contributor+) SQL Injection via Plugin's Shortcode

Priority LOW 29

The List category posts plugin for WordPress is vulnerable to time-based SQL Injection via the ‘starting_with’ parameter of the catlist shortcode in all versions up to, and including, 0.91.0 due to insufficient escaping…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00322 Published 2025-12-11 No fix listed CWE-89
TI-2025-10424 CVE-2025-11377 · GHSA-gx4w-f9jp-mv56

List category posts <= 0.92.0 - Authenticated (Contributor+) Information Exposure

Priority LOW 19

The List category posts plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 0.92.0 via the 'catlist' shortcode due to insufficient restrictions on which posts can be included.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00228 Published 2025-11-01 No fix listed CWE-200
TI-2024-00972 CVE-2024-1051 · GHSA-gw3m-hx6j-h3r6

List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The List category posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catlist' shortcode in all versions up to, and including, 0.89.6 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00446 Published 2024-03-30 No fix listed CWE-79