CVE-2016-11001: Improper Neutralization of Input During Web Page Generation

The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field...

WordPress User Submitted Posts plugin <= 20190426 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability found by NinTechNet in WordPress User Submitted Posts plugin versions = 20190426. Apache + PHP FastCGI required for exploitation of this vulnerability. Solution Update the WordPress User Submitted Posts plugin to the latest available version at least 20190501...

WordPress User Submitted Posts Plugin <= 20151113 - XSS

Because of this vulnerability, users with "unfilteredhtml" capability are allowed to include JS code to post content. Solution Update the plugin...

WordPress User Submitted Posts 20151113 Cross Site Scripting

Exploit Title: WordPress User Submitted Posts Plugin Persistent XSS Discovery Date: 2016-02-10 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: https://plugin-planet.com/ Software Link: https://wordpress.org/plugins/user-submitted-posts/ Version:...