Plugin icon

Content Mask

content-mask

Vulnerabilities:

5

Last Updated:

September 3, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-09-07
Title
Content Mask 1.7.1 - 1.8.5.5 - Contributor+ Stored XSS via Post Scripts and Styles
Fixed in
Fixed in 1.8.5.6
CVSS
6.8 (medium)
Published
2026-08-21
Title
Content Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create_new_content_mask
Fixed in
Fixed in 1.8.5.5
CVSS
2.7 (low)
Published
2025-09-22
Title
Content Mask < 1.8.5.3 - Authenticated (Contributor+) Server-Side Request Forgery
Fixed in
Fixed in 1.8.5.3
CVSS
6.4 (medium)
Published
2025-09-22
Title
Content Mask < 1.8.5.4 - Authenticated (Author+) Insecure Direct Object Reference
Fixed in
Fixed in 1.8.5.4
CVSS
2.7 (low)
Published
2022-05-03
Title
Content Mask < 1.8.4.1 - Subscriber+ Arbitrary Options Update
Fixed in
Fixed in 1.8.4.1
CVSS
8.8 (high)