Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2025-02-06
CVE-2023-1371 - W4 Post List Plugin
The W4 Post List WordPress plugin before 2.4.6 does not ensure that password protected posts can be accessed before displaying their content, which could allow any authenticated users to access them
PLUGIN
W4 Post List
CVE-2023-1371
Risk Score
Threat Entry
Updated 2025-02-06
CVE-2023-1373 - W4 Post List Plugin
The W4 Post List WordPress plugin before 2.4.6 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting
PLUGIN
W4 Post List
CVE-2023-1373
Risk Score
Threat Entry
Updated 2025-02-06
CVE-2023-0374 - W4 Post List Plugin
The W4 Post List WordPress plugin before 2.4.6 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
PLUGIN
W4 Post List
CVE-2023-0374
Risk Score