N/A
2026-04-08< 0.95.0
List category posts <= 0.94.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'catlist' Shortcode
List category posts
Minimum safe version
0.95.0
Update to 0.95.0 or later to address 8 fixable vulnerabilities
Latest available0.95.0 ✓
Medium 5.9
2026-03-13< 0.94.0
CVE-2026-32419
Medium 6.5
2025-12-11< 0.92.0
CVE-2025-10163
Medium 4.3
2025-11-01< 0.93.0
CVE-2025-11377
High 7.5
2025-05-07< 0.92.0
CVE-2025-47636
Medium 5.4
2025-01-20< 0.90.3
WordPress List category posts Plugin < 0.90.3 is vulnerable to Cross Site Scripting (XSS)
Medium 6.4
2024-03-30< 0.89.7
CVE-2024-1051
Medium 5.4
2024-01-11< 0.89.4
CVE-2023-6994