WP Show Posts

WP Show Posts has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 3 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Improper Authorization, Incorrect Authorization.

Every one of the 3 issues recorded for WP Show Posts has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. WP Show Posts is installed on roughly 70,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.1.12.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP Show Posts vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2022-4459

WP Show Posts <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2024-04-16 00:00	WP Show Posts <= 1.1.5 - Improper Authorization to Information Exposure WP Show Posts <= 1.1.5	`CVE-2023-6731`	4.3 Medium	Lucio Sá	Yes
2024-03-01 00:00	WP Show Posts <= 1.1.4 - Information Exposure WP Show Posts <= 1.1.4	`CVE-2024-1479`	5.3 Medium	Webbernaut	Yes
2023-01-11 00:00	WP Show Posts <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting WP Show Posts <= 1.1.3	`CVE-2022-4459`	6.4 Medium	István Márton	Yes

Showing 1–3 of 3 reports

Latestv1.1.6

WP Show Posts

Author

Tom

4.7(80)

94/100

Last Updated

2024-04-16 (2y ago)

Active Installs

70,000+

Downloads

612,760

Requires WP

4.5+

Requires PHP

Tested up to

WP 6.1.12

Created

2016-07-23 (10y ago)

Note This plugin is only receiving security updates at this time. Check out our GenerateBlocks plugin for a more modern solution. WP Show Posts allows you to display posts anywhere on your website using an easy to use shortcode. You can pull posts from any post type like WooCommerce, Easy Digital Downloads etc.. This plugin works with any theme. Here are the features in the free version: Posts Post type Taxonomy Terms Posts per page Pagination Columns Columns Columns gutter Images Show images Image width Image height Image alignment Image location Content Content type (excerpt or full post) Excerpt length Include title Read more text Read more button class Meta Include author Author location Include date Date location Include terms Terms location More settings Author ID Exclude current Post ID Exclude post ID Ignore sticky posts Offset Order Order by Status Meta key Meta value Tax operator No results message Our *Pro* version has these features Check out Pro Posts AJAX pagination Columns Masonry Featured post Background color Background color hover Border color Border color hover Images Image overlay color Image overlay icon Image hover effect Image lightbox Image lightbox gallery Content Read more style Read more color Content link color Content link color hover Content text color Title color Title color hover Meta Meta color Meta color hover Social Twitter Twitter color + hover Facebook Facebook color + hover Google+ Google+ color + hover Pinterest Pinterest color + hover Love it Alignment Check out GeneratePress, our awesome WordPress theme! (https://wordpress.org/themes/generatepress)

View on WordPress.org