user_submitted_posts_enable_users_to_submit_posts_from_the_front_end vulnerabilities

CVEs whose affected-version data names the user_submitted_posts_enable_users_to_submit_posts_from_the_front_end package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119162High· 7.2

6d ago

User Submitted Posts <= 20260916 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user-submitted-content' Parameter via Block-Comment Shortcode Splitting

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'user-submitted-content' parameter in all versions up to, and including, 20260…

▾ Twilightspecialk · User Submitted Posts – Enable Users to Submit Posts from the Front EndEPSS 0.24%via CVEORG