W4 Post List Project W4 Post List
4 CVEs affecting W4 Post List Project W4 Post List. Latest disclosed: 2023-06-22. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-27413 | Medium | 6.5 | 2023-06-22 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Shazzad Hossain Khan W4 Post List plugin <= 2.4.4 versions. |
CVE-2023-1371 | Medium | 6.5 | 2023-04-17 | The W4 Post List WordPress plugin before 2.4.6 does not ensure that password protected posts can be accessed before displaying their content, which could allow… |
CVE-2023-1373 | Medium | 6.1 | 2023-04-17 | The W4 Post List WordPress plugin before 2.4.6 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting |
CVE-2023-0374 | Medium | 5.4 | 2023-04-17 | The W4 Post List WordPress plugin before 2.4.6 does not validate and escape some of its block options before outputting them back in a page/post where the bloc… |