CVE-2023-6994

🗓️ 11 Jan 2024 08:32:36Reported by WordfenceType

The List category posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catlist' shortcode in all versions up to, and including, 0.89.3 due to insufficient input sanitization and output escaping on user supplied attributes

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2023-6994	11 Jan 202409:15	–	attackerkb
Circl	CVE-2023-6994	27 Jan 202404:11	–	circl
CNNVD	WordPress Plugin List category posts Security Breach	11 Jan 202400:00	–	cnnvd
Cvelist	CVE-2023-6994 List category posts <= 0.89.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	11 Jan 202408:32	–	cvelist
EUVD	EUVD-2023-59186	3 Oct 202520:07	–	euvd
NVD	CVE-2023-6994	11 Jan 202409:15	–	nvd
Patchstack	WordPress List category posts Plugin <= 0.89.3 is vulnerable to Cross Site Scripting (XSS)	10 Jan 202400:00	–	patchstack
Prion	Cross site scripting	11 Jan 202409:15	–	prion
Positive Technologies	PT-2024-15167 · WordPress · List Category Posts	11 Jan 202400:00	–	ptsecurity
RedhatCVE	CVE-2023-6994	23 May 202504:58	–	redhatcve

NVD

Vulners

Node

fernandobriano list_category_postsRange≤0.89.3wordpress

[
  {
    "vendor": "fernandobt",
    "product": "List category posts",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "0.89.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.svn.wordpress.org/list-category-posts/trunk/list-category-posts.php
plugins	www.plugins.svn.wordpress.org/list-category-posts/trunk/include/lcp-wrapper.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/611871cc-737f-44e3-baf5-dbaa8bd8eb81
plugins	www.plugins.trac.wordpress.org/changeset

08 Apr 2026 18:18Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.15.4 - 6.4

EPSS0.00193

SSVC

CWE-79