WordPress plugin
Weaver Show Posts security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium3
- Low0
All Weaver Show Posts vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting via 'Additional Classes to Wrap Posts' Widget Setting ≤1.8.1Update to 2.0 | CVE-2026-2121 | |
| Medium6.6 | Authenticated (Administrator+) PHP Object Injection ≤1.8.0Update to 1.8.1 | CVE-2023-3360 | |
| Medium6.4 | Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name ≤1.6Update to 1.7 | CVE-2023-1404 |
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting via 'Additional Classes to Wrap Posts' Widget Setting
≤1.8.1Update to 2.0
- Medium6.6Authenticated (Administrator+) PHP Object Injection
≤1.8.0Update to 1.8.1
- Medium6.4Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name
≤1.6Update to 1.7
Weaver Show Posts: common questions
Does Weaver Show Posts have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Weaver Show Posts: 3 medium. None are known to affect version null.
How do I check which version of Weaver Show Posts I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Weaver Show Posts vulnerability?
CVE-2026-2121, published Mar 20, 2026: Weaver Show Posts <= 1.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Additional Classes to Wrap Posts' Widget Setting. Severity: Medium (CVSS 4.4).
Is any Weaver Show Posts vulnerability listed in CISA KEV?
No. None of the known Weaver Show Posts vulnerabilities is currently listed in the CISA KEV catalog.