specialk vulnerabilities

CVEs per yearBy the year they were published

1. 20235
2. 20242
3. 20254
4. 202610

Newest CVEs

• CVE-2026-119162

  User Submitted Posts <= 20260916 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user-submitted-content' Parameter via Block-Comment Shortcode Splitting

  specialk · User Submitted Posts – Enable Users to Submit Posts from the Front End

  High7.2
• CVE-2026-81825

  Simple Ajax Chat <= 20260811 - Unauthenticated Stored Cross-Site Scripting

  specialk · Simple Ajax Chat – Add a Fast, Secure Chat Box

  High7.2
• CVE-2026-3876

  Prismatic <= 3.7.3 - Unauthenticated Stored Cross-Site Scripting via 'prismatic_encoded' Pseudo-Shortcode

  specialk · Prismatic

  High7.2
• CVE-2026-4278

  Simple Download Counter <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute

  specialk · Simple Download Counter

  Medium6.4
• CVE-2026-4329

  Blackhole for Bad Bots <= 3.8 - Unauthenticated Stored Cross-Site Scripting via User-Agent HTTP Header

  specialk · Blackhole for Bad Bots

  High7.2
• CVE-2026-2987

  Simple Ajax Chat <= 20260217 - Unauthenticated Stored Cross-Site Scripting via 'c'

  specialk · Simple Ajax Chat – Add a Fast, Secure Chat Box

  Medium6.1
• CVE-2026-2126

  User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter

  specialk · User Submitted Posts – Enable Users to Submit Posts from the Front End

  Medium5.3
• CVE-2026-0800

  User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field

  specialk · User Submitted Posts – Enable Users to Submit Posts from the Front End

  High7.2
• CVE-2026-0608

  Head Meta Data <= 20251118 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta

  specialk · Head Meta Data

  Medium6.4
• CVE-2026-0913

  User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode

  specialk · User Submitted Posts – Enable Users to Submit Posts from the Front End

  Medium6.4