WP Categories Widget
WP Categories Widget has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for WP Categories Widget has a vendor fix available, so running the current release closes it.
All of these findings were reported by Phd. WP Categories Widget is installed on roughly 6,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2023-31220WP Categories Widget <= 2.2 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

WP Categories Widget
Author
WP-EXPERTS.IN
The “WP Categories Widget” is a simple plugin to display the list of categories for any taxonomies type (WooCommerce Product Category, Blog Category, Project Category…etc) on your wordpress website. Using WP Categries Widget you can display list of categories anywhere on your website. And also you can disable the widget block editor and enable the classic widget layut to edit the sidebar. Note : please don’t forget to leave your valuable feedback and suggestions. Send your query to AUTHOR Video Tutorial : `Features` Disable Widget Block Editor Display Categories Post Count Hide Child Categories Hide Widget Title Show Categories for Any Taxonomies Type Exclude/Include Categories Addon Features Display Category as Drop Down Display Category Posts Manage WP Widget Style (Background Color, Text Color, Border Style & Color) Add Custom CSS for every Widget Downalod Add-on.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C