Medium
CVE-2026-62084
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 14
Reset filters
High
CVE-2026-11570
User Submitted Posts <= 20260607 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-2126
User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter
High
CVE-2026-0800
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field
Medium
CVE-2026-0913
User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode
Medium
CVE-2025-68509
User Submitted Posts <= 20251121 - Unauthenticated Open Redirect
Medium
CVE-2025-2874
User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-5002
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20240319 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2023-45603
User Submitted Posts <= 20230902 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-7251
User Submitted Posts <= 20230901 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4779
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-4308
User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'
Critical
CVE-2019-25138
User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload
High
CVE-2016-11001
User Submitted Posts < 20160215 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.