Skip to content
OpenAdvisories

Vendor

wpqode

2 known vulnerabilities.

Products

Editorial Rating – Product Review & Rating System 1 FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-12560

    Editorial Rating <= 4.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Link URL' Field

    The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it …

    wpqode Editorial Rating – Product Review & Rating System Web / CMS
  • Medium 4.3
    CVE-2024-10536

    FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor <= 6.0.0 - Missing Authorization to Authenticated (Subscriber+) Shortcode Export

    The FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_block_shortcode_export() function in all…

    wpqode FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor Web / CMS