Extension WordPress
Vulnérabilités User Submitted Posts – Enable Users to Submit Posts from the Front End
Cette page rassemble les failles publiées pour User Submitted Posts – Enable Users to Submit Posts from the Front End, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de User Submitted Posts – Enable Users to Submit Posts from the Front End
12 fiches
User Submitted Posts <= 20260113 – Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 20260113. This is due to the `usp_get_submitted_category()` function accepting…
*-20260113
20260217
17/02/2026
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 – Unauthenticated Stored Cross-Site Scripting via Custom Field
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom fields in all versions up to, and including, 20251210 due to insufficient…
*-20251210
20260110
23/01/2026
User Submitted Posts <= 20260110 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'usp_access' shortcode in all versions up to, and including, 20260110 due to…
*-20260110
20260113
15/01/2026
User Submitted Posts <= 20251121 – Unauthenticated Open Redirect
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 20251121. This is due to insufficient validation on the…
*-20251121
20251210
01/01/2026
User Submitted Posts <= 20241026 – Authenticated (Admin+) Stored Cross-Site Scripting
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 20240319 due to insufficient input…
*-20241026
20250327
02/04/2025
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20240319 – Authenticated (Admin+) Stored Cross-Site Scripting
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 20240319 due to insufficient input…
*-20240319
20240516
22/06/2024
User Submitted Posts <= 20230902 – Unauthenticated Arbitrary File Upload
The User Submitted Posts plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the usp_attach_images function in versions up to, and including, 20230902. This makes it possible for unauthenticatedattackers to upload…
*-20230902
20230914
10/10/2023
User Submitted Posts <= 20230901 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 20230901 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-20230901
20230902
06/09/2023
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [usp_gallery] shortcode in versions up to, and including, 20230811 due to insufficient input sanitization and output escaping on user supplied attributes like…
*-20230811
20230901
05/09/2023
User Submitted Posts <= 20230809 – Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'
The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘user-submitted-content’ parameter in versions up to, and including, 20230809 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
*-20230809
20230811
14/08/2023
User Submitted Posts <= 20190312 – Unauthenticated Arbitrary File Upload
The User Submitted Posts plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the usp_check_images function in versions up to, and including, 20190312. This makes it possible for unauthenticated attackers to…
[*, 20190426)
20190426
02/05/2019
User Submitted Posts < 20160215 – Reflected Cross-Site Scripting
The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field.
[*, 20160215)
20160215
10/02/2016
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.