VULNERABILITY INTELLIGENCE

CVE-2026-12434

CVSS score4.3 MEDIUM

EPSS probability0.23%

CISA KEVNot currently listed

Published2026-07-16

Last modified2026-07-16

Description

The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitize_status. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles, full content, excerpts, d…