Plugin icon

Draft List

simple-draft-list

Vulnerabilities:

6

Last Updated:

August 17, 2026

Active Installs:

60

Published
Title
Fixed in
CVSS
Published
2026-08-18
Title
Draft List < 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.5
CVSS
5.5 (medium)
Published
2026-05-21
Title
Draft List < 2.6.4 - Authenticated (Author+) Stored Cross-Site Scripting via Draft Post Title
Fixed in
Fixed in 2.6.4
CVSS
5.5 (medium)
Published
2026-05-20
Title
Draft List < 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.4
CVSS
5.5 (medium)
Published
2026-03-18
Title
Draft List < 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' Parameter
Fixed in
Fixed in 2.6.3
CVSS
5.5 (medium)
Published
2025-10-10
Title
Draft List < 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.2
CVSS
6.4 (medium)
Published
2025-09-19
Title
Draft List < 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.1
CVSS
6.4 (medium)