Category Dropdown by GCS Design
Category Dropdown by GCS Design has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.
2 independent researchers contributed these findings, one record each. Category Dropdown by GCS Design is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.
CVE-2025-58239WP Category Dropdown <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Category Dropdown by GCS Design
Author
Chandrika Sista
WP Category Dropdown plugin displays parent and child categories in a dropdown. You can select the parent category and display a dropdown for the child categories of the selected parent. If the selected parent category does not have a child category, you will be automatically directed to the category page. You can use the shortcode or the widget to display the dropdown categories. You can learn more at gcsdesign.com/wp_category_dropdown
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C