CVE-2023-0097

CVE-2023-0097 concerns the WordPress plugin Post Grid, Post Carousel, & List Category Posts (versions prior to 2.4.19). The issue arises because the plugin does not validate or escape certain block options before outputting them when the block is embedded, enabling Stored Cross-Site Scripting for...

CVE-2024-3996

The Smart Post Show WordPress plugin (specifically versions prior to 2.4.28 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to sanitise and escape certain settings, which allows high-privilege users, such as administrators, to perform XSS attacks. This vulnera...

CVE-2024-8187

The CVE-2024-8187 entry affects the Smart Post Show WordPress plugin (versions