Vulnerabilities

TI-2026-01080 CVE-2026-1378 · GHSA-jpp3-8q76-54rx

WP Posts Re-order <= 1.0 - Cross-Site Request Forgery to Settings Update

LOW 19

The WP Posts Re-order plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00149 Published 2026-03-21 No fix listed CWE-352

TI-2024-09172 CVE-2024-9886 · GHSA-jgwp-m7m3-vxcm

WP Baidu Map <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 28

The WP Baidu Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'baidu_map' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output esca…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00355 Published 2024-10-30 No fix listed CWE-79

Vulnerabilities

Filters

WP Posts Re-order <= 1.0 - Cross-Site Request Forgery to Settings Update

WP Baidu Map <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode