Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: frucomerci Clear all filters
TI-2025-20837 CVE-2025-28894 · GHSA-xcpx-xw8r-x8rf

WordPress List of Posts from each Category plugin for WordPress plugin <= 2.0 - CSRF to Stored XSS vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in frucomerci List of Posts from each Category plugin for WordPress list-posts-by-category allows Stored XSS.This issue affects List of Posts from each Category plugin for…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00151 Published 2025-03-11 No fix listed CWE-352