WP Post Disclaimer
WP Post Disclaimer has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for WP Post Disclaimer has a vendor fix available, so running the current release closes it.
All of these findings were reported by LVT-tholv2k. WP Post Disclaimer is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2024-29761WP Post Disclaimer <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

WP Post Disclaimer
Author
Krunal Prajapati
Add a disclaimer/terms/warnings about post/page/custom post type on top, bottom of content as well as inside post content Features Disclaimer on Post/Page or Custom Post Type Customized Options Custom CSS Option Individual Post/Page or Custom Post Type Options Font Awesome Icons Use with Shortcode
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C