Plugin-planet User Submitted Posts vulnerabilities

• jeff starr user submitted posts User Submitted Posts < 20240516 - Admin+ Stored XSS CVE-2024-5002 4.8 MediumJuly 13, 2024
• jeff starr user submitted posts – enable users to submit posts from the front end, plugin-planet user submitted posts +1 more WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload CVE-2023-45603 9.0 CriticalDecember 20, 2023
• plugin-planet user submitted posts, specialk user submitted posts – enable users to submit posts from the front end +1 more User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-4779 6.4 MediumSeptember 6, 2023
• plugin-planet user submitted posts, specialk user submitted posts – enable users to submit posts from the front end +1 more User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content' CVE-2023-4308 7.2 HighAugust 15, 2023
• plugin-planet user submitted posts, specialk user submitted posts – enable users to submit posts from the front end +1 more User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload CVE-2019-25138 9.8 CriticalJune 7, 2023
• plugin-planet user submitted posts The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted... CVE-2016-11001 6.1 MediumSeptember 20, 2019