← Back

Post Connector

post_connector

Vendor: Never5 • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Never5
1Post Connector
Jun 17, 2026
Aug 8, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Never5 Post Connector plugin <= 1.0.9 versions.
1Never5
1Post Connector
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().