Skip to content
OpenAdvisories

Vendor

specialk

21 known vulnerabilities.

Products

User Submitted Posts – Enable Users to Submit Posts from the Front End 8 Simple Download Counter 4 Simple Ajax Chat – Add a Fast, Secure Chat Box 3 Dashboard Widgets Suite 1 Prismatic 1 Banhammer – Monitor Site Traffic, Block Bad Users and Bots 1 Blackhole for Bad Bots 1 Theme Switcha – Easily Switch Themes for Development and Testing 1 Head Meta Data 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.2
    CVE-2026-119162

    User Submitted Posts <= 20260916 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user-submitted-content' Parameter via Block-Comment Shortcode Splitting

    The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'user-submitted-content' parameter in all versions up to, and including, 20260916 due to insufficien…

    specialk User Submitted Posts – Enable Users to Submit Posts from the Front End Web / CMS
  • High 7.2
    CVE-2026-81825

    Simple Ajax Chat <= 20260811 - Unauthenticated Stored Cross-Site Scripting

    The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Chat Message in all versions up to, and including, <= 20260811 due to insufficient input sanitization and output escaping. This makes it p…

    specialk Simple Ajax Chat – Add a Fast, Secure Chat Box Web / CMS
  • High 7.2
    CVE-2026-3876

    Prismatic <= 3.7.3 - Unauthenticated Stored Cross-Site Scripting via 'prismatic_encoded' Pseudo-Shortcode

    The Prismatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'prismatic_encoded' pseudo-shortcode in all versions up to, and including, 3.7.3. This is due to insufficient input sanitization and output escaping on user-supplied attri…

    specialk Prismatic Web / CMS
  • High 7.2
    CVE-2026-4329

    Blackhole for Bad Bots <= 3.8 - Unauthenticated Stored Cross-Site Scripting via User-Agent HTTP Header

    The Blackhole for Bad Bots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent HTTP header in all versions up to and including 3.8. This is due to insufficient input sanitization and output escaping. The plugin uses sanitize_t…

    specialk Blackhole for Bad Bots Web / CMS
  • High 7.2
    CVE-2026-0800

    User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field

    The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom fields in all versions up to, and including, 20251210 due to insufficient input sanitization and output…

    specialk User Submitted Posts – Enable Users to Submit Posts from the Front End Web / CMS
  • High 7.2
    CVE-2023-4308

    User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'

    The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘user-submitted-content’ parameter in versions up to, and including, 20230809 due to insufficient input sanitization and output escaping. This makes it possible…

    specialk User Submitted Posts – Enable Users to Submit Posts from the Front End Web / CMS