Category Posts Widget (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-04-24. Vendor: Unknown.

CVEs of Category Posts Widget

• CVE-2025-1453 - CVSS 4.8 (medium), 2025-04-24: The Category Posts Widget WordPress plugin before 4.9.20 does not sanitise and escape some of its settings, which could allow high privilege users such as…
• CVE-2024-9638 - CVSS 4.8 (medium), 2025-01-07: The Category Posts Widget WordPress plugin before 4.9.18 does not sanitise and escape some of its settings, which could allow high privilege users such as…
• CVE-2024-6158 - CVSS 4.8 (medium), 2024-08-12: The Category Posts Widget WordPress plugin before 4.9.17, term-and-category-based-posts-widget WordPress plugin before 4.9.13 does not validate and escape…