Draft List

simple-draft-list · plugin

Known security vulnerabilities for Draft List. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

latest Aug 18, 2026

Vulnerabilities

CVE-2026-66603
WordPress Draft List plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability
Medium 6.5
CVE-2026-9104
Draft List <= 2.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via Draft Post Title
Medium 6.4
CVE-2026-4006
Draft List <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' Parameter
Medium 6.4
CVE-2025-11197
Draft List <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium 6.4
CVE-2025-10181
Draft List <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium 6.4