Skip to contentSpecialk User Submitted Posts – Enable Users To Submit Posts From The Front End vulnerabilities
- specialk user submitted posts – enable users to submit posts from the front endUser Submitted Posts <= 20260916 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user-submitted-content' Parameter via Block-Comment Shortcode SplittingCVE-2026-1191627.2 High
- specialk user submitted posts – enable users to submit posts from the front endUser Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' ParameterCVE-2026-21265.3 Medium
- specialk user submitted posts – enable users to submit posts from the front endUser Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom FieldCVE-2026-08007.2 High
- specialk user submitted posts – enable users to submit posts from the front endUser Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' ShortcodeCVE-2026-09136.4 Medium
- specialk user submitted posts – enable users to submit posts from the front endUser Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2025-28744.4 Medium
- jeff starr user submitted posts – enable users to submit posts from the front end, plugin-planet user submitted posts +1 moreWordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File UploadCVE-2023-456039.0 Critical
- plugin-planet user submitted posts, specialk user submitted posts – enable users to submit posts from the front end +1 moreUser Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-47796.4 Medium
- plugin-planet user submitted posts, specialk user submitted posts – enable users to submit posts from the front end +1 moreUser Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'CVE-2023-43087.2 High
- plugin-planet user submitted posts, specialk user submitted posts – enable users to submit posts from the front end +1 moreUser Submitted Posts <= 20190312 - Unauthenticated Arbitrary File UploadCVE-2019-251389.8 Critical