Skip to content
VulnCrestRadar

Search vulnerabilities

Search CVE ids, WordPress plugins or keywords

Report an incidentReport
← Database
CVE-2026-120843

Posts Table with Search & Sort <= 1.4.14

Affected
Posts Table with Search & Sort <= 1.4.14
Patched in
1.4.15
CVSS 3.1
6.5 medium
CISA KEV
Not listed
Technical details
Software
Posts Table with Search & Sort WP plugin
Latest release
1.4.15
Active installs
3,000+
Weakness
CWE-79
EPSS · 08 Nov 2026
0.13% · p3
Public resources
None found
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

No VulnCrest analysis published for this CVE yet. Below is the original CNA/NVD description, unmodified.

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Barn2 Plugins Posts Table with Search & Sort posts-data-table allows Stored XSS.This issue affects Posts Table with Search & Sort: from n/a through 1.4.14.

Exploits & detection

No public PoC or detection template found yet.

Timeline

  • Published: 03 Nov 2026
  • Last modified upstream: 06 Nov 2026

Sources & licenses

Vulnerability data
Wordfence Intelligence — record ↗ · Copyright Defiant Inc.
CVE / CVSS / CWE
NVD record ↗ (unmodified). This product uses the NVD API but is not endorsed or certified by the NVD. CVE® © The MITRE Corporation.
Exploitation
CISA KEV (CC0) · EPSS by FIRST.org
References used for the analysis
Analysis, summary and remediation
© VulnCrest

View JSON