VendorsPlugin Planetuser_submitted_postsall versions
Vulnerabilities

Plugin Planet User Submitted Posts for WordPress

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2019-25138
User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload
Published 2023-06-07 · Modified
9.8EPSS 0.023
CVE-2023-45603
WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload
Published 2023-12-20 · Modified
9.8EPSS 0.009
CVE-2023-4308
User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'
Published 2023-08-15 · Modified
7.2EPSS 0.004
CVE-2023-4779
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2023-09-06 · Modified
6.4EPSS 0.004
CVE-2016-11001
The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field.
Published 2019-09-20 · Modified
6.1EPSS 0.012
CVE-2024-5002
User Submitted Posts < 20240516 - Admin+ Stored XSS
Published 2024-07-13 · Analyzed
4.8EPSS 0.004