Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

User Submitted Posts – Enable Users to Submit Posts from the Front End — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in User Submitted Posts – Enable Users to Submit Posts from the Front End, with AI-generated Chinese analysis, references, and POCs.

Vendor: specialk

CVE IDTitleCVSSSeverityPublished
CVE-2026-2126 User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter CWE-863 5.3 Medium2026-02-18
CVE-2026-0800 User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field CWE-79 7.2 High2026-01-24
CVE-2026-0913 User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode CWE-79 6.4 Medium2026-01-16
CVE-2025-2874 User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting CWE-79 4.4 Medium2025-04-03
CVE-2023-45603 WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload CWE-434 9.0 Critical2023-12-20
CVE-2023-4779 User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2023-09-06
CVE-2023-4308 User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content' CWE-79 7.2 High2023-08-15
CVE-2019-25138 User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload CWE-434 9.8 Critical2023-06-07

All 8 known CVE vulnerabilities affecting User Submitted Posts – Enable Users to Submit Posts from the Front End with full Chinese analysis, references, and POCs where available.