Plugin icon

User Submitted Posts – Enable Users to Submit Posts from the Front End

user-submitted-posts

Vulnerabilities:

12

Last Updated:

March 27, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-02-17
Title
User Submitted Posts < 20260217 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter
Fixed in
Fixed in 20260217
CVSS
5.3 (medium)
Published
2026-01-23
Title
User Submitted Posts – Enable Users to Submit Posts from the Front End < 20260110 - Unauthenticated Stored Cross-Site Scripting via Custom Field
Fixed in
Fixed in 20260110
CVSS
7.2 (high)
Published
2026-01-15
Title
User Submitted Posts < 20260113 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode
Fixed in
Fixed in 20260113
CVSS
6.4 (medium)
Published
2026-01-01
Title
User Submitted Posts < 20251210 - Unauthenticated Open Redirect
Fixed in
Fixed in 20251210
CVSS
5.3 (medium)
Published
2025-04-02
Title
User Submitted Posts < 20250327 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 20250327
CVSS
4.4 (medium)
Published
2024-06-22
Title
User Submitted Posts < 20240516 - Admin+ Stored XSS
Fixed in
Fixed in 20240516
CVSS
3.5 (low)
Published
2023-10-10
Title
User Submitted Posts < 20230914 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 20230914
CVSS
9.8 (critical)
Published
2023-09-06
Title
User Submitted Posts < 20230902 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 20230902
CVSS
6.4 (medium)
Published
2023-09-05
Title
User Submitted Posts < 20230901 - Contributor+ Stored XSS via Shortcode
Fixed in
Fixed in 20230901
CVSS
6.4 (medium)
Published
2023-08-14
Title
User Submitted Posts < 20230811 - Unauthenticated Stored XSS
Fixed in
Fixed in 20230811
CVSS
8.3 (high)
Published
2019-05-02
Title
User Submitted Posts < 20190501 - Arbitrary File Upload
Fixed in
Fixed in 20190501
CVSS
n/a
Published
2016-02-25
Title
User Submitted Posts < 20160215 - Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 20160215
CVSS
6.1 (medium)