All 5 CVE vulnerabilities found in Draft List, with AI-generated Chinese analysis, references, and POCs.
Vendor: dartiss
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-66603 | WordPress Draft List plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability CWE-79 | 6.5 | Medium | 2026-08-18 |
| CVE-2026-9104 | Draft List <= 2.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via Draft Post Title CWE-79 | 6.4 | Medium | 2026-05-22 |
| CVE-2026-4006 | Draft List <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' Parameter CWE-79 | 6.4 | Medium | 2026-03-19 |
| CVE-2025-11197 | Draft List <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 | 6.4 | Medium | 2025-10-11 |
| CVE-2025-10181 | Draft List <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 | 6.4 | Medium | 2025-09-20 |
All 5 known CVE vulnerabilities affecting Draft List with full Chinese analysis, references, and POCs where available.