CVE-2026-9620: Improper Neutralization of Input During Web Page Generation

The WP Latest Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted image src attributes in post content in versions up to, and including, 5.0.11. This is due to insufficient output escaping in the field and loop functions, which extract the raw src attribute value...

CVE-2024-4135

CVE-2024-4135 affects the WP Latest Posts WordPress plugin, vulnerable in all versions up to 5.0.7. Unauthenticated attackers can trigger arbitrary shortcodes due to unvalidated user input used by do_shortcode. CVSS v3.1 base score 5.4 (Medium). A patched version exists; remediation is to update ...

CVE-2024-4135: Improper Control of Generation of Code

The WP Latest Posts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.7. This is due to the plugin allowing users to execute an action that does not properly validate a user-supplied value prior to using that value in a call to...

PT-2024-29368

Name of the Vulnerable Software and Affected Versions WP Latest Posts plugin for WordPress versions up to, and including, 5.0.7 Description The issue is due to the plugin allowing users to execute an action that does not properly validate a user-supplied value prior to using that value in a call ...

Cross site scripting

The wp-latest-posts plugin before 3.7.5 for WordPress has XSS...

CVE-2016-10913

The wp-latest-posts plugin before 3.7.5 for WordPress has XSS...

CVE-2016-10913

The CVE-2016-10913 entry concerns the WordPress plugin wp-latest-posts, specifically versions before 3.7.5. The connected documents confirm a cross-site scripting (XSS) vulnerability in this plugin. The provided sources do not specify the exact root cause, affected file/function, exploitation det...

CVE-2016-10913: Improper Neutralization of Input During Web Page Generation

The wp-latest-posts plugin before 3.7.5 for WordPress has XSS...

PT-2019-7709

Name of the Vulnerable Software and Affected Versions wp-latest-posts plugin versions prior to 3.7.5 Description The issue is related to a cross-site scripting XSS problem. Recommendations For wp-latest-posts plugin versions prior to 3.7.5, update to version 3.7.5 or later to resolve the issue...