Plugin icon

Weaver Show Posts

show-posts

Vulnerabilities:

3

Last Updated:

April 20, 2026

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2026-03-20
Title
Weaver Show Posts <= 1.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Additional Classes to Wrap Posts' Widget Setting
Fixed in
No known fix
CVSS
4.4 (medium)
Published
2023-08-08
Title
Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection
Fixed in
Fixed in 1.8.1
CVSS
3.3 (low)
Published
2023-04-01
Title
Weaver Show Posts < 1.7 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.7
CVSS
6.4 (medium)