Wplakeorg vulnerabilities

Newest

• wplakeorg advanced views – display framework – gutenberg/elementor/shortcode Advanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content CVE-2026-109995 7.2 HighOctober 27, 2026
• wplakeorg advanced views – display custom fields (acf, pods, metabox), posts, cpt and woo products anywhere in gutenberg, elementor, divi, beaver… Advanced Views <= 3.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'view-refresh' and 'card-refresh' REST Endpoints CVE-2026-17580 6.5 MediumAugust 1, 2026
• wplakeorg advanced views – display custom fields (acf, pods, metabox), posts, cpt and woo products anywhere in gutenberg, elementor, divi, beaver… Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI CVE-2025-10380 8.8 HighSeptember 23, 2025