user-submitted-posts

Slug: user-submitted-posts · · 0+

Not updated in last 3 months

Overall Score

Scan this plugin to generate a full score report

--
Not Yet Scanned

What this score means

Scores are calculated on a 100-point scale by analysing six weighted categories: Security, WP.org Readiness, Performance, Code Quality, Accessibility, and Vulnerabilities. Open vulnerabilities are weighted by severity, CVSS, and patch availability, and incomplete source data can reduce confidence slightly.

  • Excellent The plugin follows best practices across every measured category. It is well-maintained, low-risk, and recommended for production use.
  • Good Strong overall quality with minor areas for improvement. Generally safe to use on most sites.
  • Needs Review Some areas of concern detected. Review the full issues report and weigh the risks before installing on production.
  • High Risk Significant quality or security problems found. Exercise caution — check the details carefully before using this plugin.
No scan has been completed yet. Vulnerability and issue data will appear after the first scan.
  • Wordfence: June 10, 2026 4:46 am (13 minutes ago)

Score Breakdown

Shield
Security
--
Pending Scan
W
WP.org Readiness
--
Pending Scan
Speed
Performance
--
Pending Scan
Code
Code Quality
--
Pending Scan
A11y
Accessibility
--
Pending Scan
Bug
Vulnerability Status
--
Pending Scan

Plugin Details

Scan Summary

  • Errors: 0
  • Warnings: 0
  • Notices: 0
  • Last Scanned: N/A
No scan results yet. Start the first scan to populate this summary.

Detected Issues

No issues to display yet. Run the first scan to generate findings.

Score History

No history available yet. · All-Time High: N/A

All Past Vulnerabilities

Showing all known historical vulnerabilities for this plugin, including open and closed records.

Vulnerability CVE Severity Status Affected Versions Patched Version Updated Source
User Submitted Posts < 20160215 - Reflected Cross-Site Scripting N/A LOW Closed [*, 20160215) 20160215 2016-02-10 00:00:00 Wordfence
User Submitted Posts <= 20251121 - Unauthenticated Open Redirect N/A LOW Closed *-20251121 20251210 2026-01-01 00:00:00 Wordfence
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode N/A LOW Closed *-20230811 20230901 2023-09-05 00:00:00 Wordfence
User Submitted Posts <= 20230902 - Unauthenticated Arbitrary File Upload N/A LOW Closed *-20230902 20230914 2023-10-10 00:00:00 Wordfence
User Submitted Posts <= 20230901 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode N/A LOW Closed *-20230901 20230902 2023-09-06 00:00:00 Wordfence
User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting N/A LOW Closed *-20241026 20250327 2025-04-02 18:47:46 Wordfence
User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode N/A LOW Closed *-20260110 20260113 2026-01-15 00:00:00 Wordfence
User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload N/A LOW Closed [*, 20190426) 20190426 2019-05-02 00:00:00 Wordfence
User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content' N/A LOW Closed *-20230809 20230811 2023-08-14 00:00:00 Wordfence
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field N/A LOW Closed *-20251210 20260110 2026-01-23 19:55:08 Wordfence
User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter N/A LOW Closed *-20260113 20260217 2026-02-17 20:36:12 Wordfence
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20240319 - Authenticated (Admin+) Stored Cross-Site Scripting N/A LOW Closed *-20240319 20240516 2024-06-22 00:00:00 Wordfence