İçeriğe atla
Noroxi

User Submitted Posts – Enable Users to Submit Posts from the Front End

user-submitted-posts · eklenti

User Submitted Posts – Enable Users to Submit Posts from the Front End için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

11 bilinen açık

2 kritik · 1 kayıt için istismar kodu yayımlanmış · son kayıt 30 Eyl 2026

Güvenlik açıkları

  • CVE-2023-45603

    WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload

    Kritik 9.8

  • CVE-2019-25138→ 20190426

    User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload

    Kritik 9.8

  • CVE-2026-0800

    User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field

    Yüksek 7.2

  • CVE-2026-62084

    WordPress User Submitted Posts plugin <= 20260810 - Cross Site Scripting (XSS) vulnerability

    Orta 6.5

  • CVE-2023-7251

    WordPress User Submitted Posts plugin <= 20230901 - Cross Site Scripting (XSS) vulnerability

    Orta 6.5

  • CVE-2026-0913

    User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode

    Orta 6.4

  • CVE-2016-11001

    The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field.

    Orta 6.1

  • CVE-2023-4308

    User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'

    Orta 5.4

  • CVE-2026-2126

    User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter

    Orta 5.3

  • CVE-2025-68509

    WordPress User Submitted Posts plugin <= 20251121 - Open Redirection vulnerability

    Orta 4.7

  • CVE-2025-2874

    User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting

    Orta 4.4

← Dizine dön