What’s Vulnerable › Products

specialk User Submitted Posts – Enable Users to Submit Posts from the Front End vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your specialk User Submitted Posts – Enable Users to Submit Posts from the Front End version is affected

Latest specialk User Submitted Posts – Enable Users to Submit Posts from the Front End vulnerabilities

• CVE-2026-62084 — WordPress User Submitted Posts plugin <= 20260810 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-11570 — User Submitted Posts < 20260608 - Unauthenticated Stored XSS via Author Name (CVSS 4.2)
• CVE-2026-2126 — User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter (CVSS 5.3)
• CVE-2026-0800 — User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field (CVSS 7.2)
• CVE-2026-0913 — User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode (CVSS 6.4)
• CVE-2025-68509 — WordPress User Submitted Posts plugin <= 20251121 - Open Redirection vulnerability (CVSS 4.7)
• CVE-2025-2874 — User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4)
• CVE-2024-5002 — User Submitted Posts < 20240516 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2023-7251 — WordPress User Submitted Posts plugin <= 20230901 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2023-45603 — WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload (CVSS 9.8)
• CVE-2023-4779 — User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
• CVE-2023-4308 — User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content' (CVSS 5.4)
• CVE-2019-25138 — User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload (CVSS 9.8)
• CVE-2016-11001 — (CVSS 6.1)