WordPress plugin
Content Repeater – Custom Posts Simplified security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium2
- Low0
All Content Repeater – Custom Posts Simplified vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.5 | Authenticated (Admin+) Stored Cross-Site Scripting ≤1.1.3No patch available | — | |
| Medium5.5 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤1.1.13No patch available | CVE-2022-44632 |
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
≤1.1.3No patch available
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
≤1.1.13No patch available
Content Repeater – Custom Posts Simplified: common questions
Does Content Repeater – Custom Posts Simplified have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Content Repeater – Custom Posts Simplified: 2 medium. At least one is not fixed in the latest version.
How do I check which version of Content Repeater – Custom Posts Simplified I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Content Repeater – Custom Posts Simplified vulnerability?
21ae9136-a60c-483d-bdf4-b0c55796560d, published Nov 25, 2022: Content Repeater <= 1.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting. Severity: Medium (CVSS 5.5).
Is any Content Repeater – Custom Posts Simplified vulnerability listed in CISA KEV?
No. None of the known Content Repeater – Custom Posts Simplified vulnerabilities is currently listed in the CISA KEV catalog.