Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
W4 Post List ProjectW4 Post List

4 matches found

CVE
CVE•added 2023/04/17 12:17 p.m.•77 views

CVE-2023-0374

CVE-2023-0374 affects the W4 Post List WordPress plugin prior to version 2.4.6. The vulnerability arises from insufficient validation/escaping of block options before output in a page/post where the block is embedded, enabling Stored XSS by users with Contributor+ privileges. Public details from ...

5.4CVSS5.5AI score0.00444EPSS
CVE
CVE•added 2023/04/17 12:17 p.m.•69 views

CVE-2023-1373

The CVE-2023-1373 entry concerns the WordPress plugin W4 Post List, affected up to version 2.4.6. The root cause is insufficient escaping of URLs output in HTML attributes, leading to a reflected XSS vulnerability. Impact is described as Reflected Cross-Site Scripting with low confidentiality/int...

6.1CVSS6.2AI score0.00458EPSS
Web
CVE
CVE•added 2023/04/17 12:17 p.m.•68 views

CVE-2023-1371

CVE-2023-1371 affects the W4 Post List WordPress plugin prior to version 2.4.6. The vulnerability arises because the plugin does not properly enforce access controls for password-protected posts before displaying their content, potentially allowing any authenticated user (Subscriber level) to vie...

6.5CVSS6.7AI score0.00654EPSS
Web
CVE
CVE•added 2023/06/22 7:42 a.m.•44 views

CVE-2023-27413

CVE-2023-27413 affects WordPress W4 Post List plugin versions

6.5CVSS5.5AI score0.00399EPSS