Known vulnerabilities in User Submitted Posts – Enable Users to Submit Posts from the Front End

Enable visitors to submit posts and images from the front-end of your site. Many features including anti-spam security, content restriction, and more.

12Reported vulnerabilities

9.8Highest CVSS score

20260810Latest version

10,000+Active installs

What to do now

Update User Submitted Posts – Enable Users to Submit Posts from the Front End to 20260217 or later. 12 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 10, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2019-25138	Critical 9.8	2.3%	20190312 and earlier	`20190426`	June 7, 2023
CVE-2016-11001	Medium 6.1	1.2%	Before 20160215	`20160215`	September 20, 2019
CVE-2023-45603	Critical 9.8	0.9%	20230902 and earlier	`20230914`	October 10, 2023
CVE-2024-5002	Medium 4.8	0.4%	Before 20240516	`20240516`	July 13, 2024
CVE-2026-0800	High 7.2	0.2%	0 to 20251210 (inclusive)	`20260110`	January 24, 2026
CVE-2023-7251	Medium 6.4	0.3%	20230901 and earlier	`20230902`	September 6, 2023
CVE-2026-0913	Medium 6.4	0.2%	0 to 20260110 (inclusive)	`20260113`	January 16, 2026
CVE-2025-68509	Medium 5.3	0.5%	20251121 and earlier	`20251210`	January 1, 2026
CVE-2023-4779	Medium 5.4	0.3%	20230811 and earlier	`20230901`	September 6, 2023
CVE-2023-4308	Medium 5.4	0.4%	Before 20230811	`20230811`	August 15, 2023
CVE-2026-2126	Medium 5.3	0.3%	0 to 20260113 (inclusive)	`20260217`	February 18, 2026
CVE-2025-2874	Medium 4.4	0.2%	20241026 and earlier	`20250327`	April 2, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.