What’s Vulnerable › Products

fernandobt List category posts vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your fernandobt List category posts version is affected

Latest fernandobt List category posts vulnerabilities

• CVE-2026-12434 — List category posts <= 0.95.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'post_status' Shortcode Attribute (CVSS 4.3)
• CVE-2026-3005 — List category posts <= 0.94.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'catlist' Shortcode (CVSS 6.4)
• CVE-2025-10163 — List Category Posts <= 0.91.0 - Authenticated (Contributor+) SQL Injection via Plugin's Shortcode (CVSS 6.5)
• CVE-2025-11377 — List category posts <= 0.92.0 - Authenticated (Contributor+) Information Exposure (CVSS 4.3)
• CVE-2024-9020 — List category posts < 0.90.3 - Author+ Stored XSS (CVSS 5.4)
• CVE-2024-1051 — List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2023-6994 — List category posts <= 0.89.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)