Skip to content
OpenAdvisories

Vendor

arnoesterhuizen

1 known vulnerabilities.

Products

Allow HTML in Category Descriptions 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2026-0693

    Allow HTML in Category Descriptions <= 1.2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Category Descriptions

    The Allow HTML in Category Descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via category descriptions in all versions up to, and including, 1.2.4. This is due to the plugin unconditionally removing the `wp_kses_data` output filte…

    arnoesterhuizen Allow HTML in Category Descriptions Web / CMS