Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
list-category-posts
WordPress
· Plugin
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
List category posts <= 0.95.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'post_status' Shortcode Attribute
CVE-2026-12434
list-category-posts
WordPress
Medium
Fix reported
2026-07-16
List category posts <= 0.93.1 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2026-32419
list-category-posts
WordPress
Medium
Fix reported
2026-04-16
List category posts <= 0.94.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'catlist' Shortcode
CVE-2026-3005
list-category-posts
WordPress
Medium
Fix reported
2026-04-09
List Category Posts <= 0.91.0 - Authenticated (Contributor+) SQL Injection via Plugin's Shortcode
CVE-2025-10163
list-category-posts
WordPress
Medium
Fix reported
2025-12-11
List category posts <= 0.92.0 - Authenticated (Contributor+) Information Exposure
CVE-2025-11377
list-category-posts
WordPress
Medium
Fix reported
2025-11-01
List category posts <= 0.91.0 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-47636
list-category-posts
WordPress
High
Fix reported
2025-09-18
List category posts <= 0.90.2 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-9020
list-category-posts
WordPress
Medium
Fix reported
2025-02-21
List category posts <= 0.89.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-6994
list-category-posts
WordPress
Medium
Fix reported
2024-10-24
List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-1051
list-category-posts
WordPress
Medium
Fix reported
2024-03-30
