Recent Posts Widget Extended

Recent Posts Widget Extended has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2025; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

All of these findings were reported by Muhammad Yudha - DJ.

01234567891019.10.2015Today19.10.20154.8Recent Posts Widget Extended <= 0.9.9.3 - Cross Site-Scripting CVSS 4.8 · 19.10.201505.09.20256.4Recent Posts Widget Extended <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode CVSS 6.4 · 05.09.2025

Strategic Overview

Avg CVSSMedium
5.6/ 10
Patch Coverage50%
Open

1

Fixed

1

Get automatic notifications for all Recent Posts Widget Extended vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-6757

Recent Posts Widget Extended <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode

Read the full analysis

Vulnerability Records

2 records
Showing 1–2 of 2 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C