همهٔ محصولات
post-carousel
WordPress · افزونه8 گزارش
| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
| Smart Post <= 4.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User display_name via Author Filter blockCVE-2026-119160 |
post-carousel |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News 4.0.0 - 4.0.7 - Unauthenticated Password-Protected Post Content DisclosureCVE-2026-78149 |
post-carousel |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News 4.0.0 - 4.0.7 - Authenticated (Contributor+) Insecure Direct Object ReferenceCVE-2026-78150 |
post-carousel |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts <= 3.0.12 - Authenticated (Administrator+) PHP Object InjectionCVE-2026-3017 |
post-carousel |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| Smart Post Show <= 3.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting via Pagination ColorCVE-2024-8187 |
post-carousel |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| Post Grid, Post Carousel, & List Category Posts <= 2.4.27 - Authenticated (Editor+) Stored Cross-Site ScriptingCVE-2024-3996 |
post-carousel |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| Post Carousel < 2.3.5 - Missing Capabilities Check |
post-carousel |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| Post Grid, Post Carousel, & List Category Posts <= 2.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-0097 |
post-carousel |
WordPress |
متوسط
|
اصلاح گزارش شده |
|