Advisories · Technology

Shazzad Hossain Khan W4 Post List.

Every CVE that names Shazzad Hossain Khan W4 Post List among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96826 CVE record

CVSS 7.6 High

WordPress W4 Post List plugin <= 3.0.6 - SQL Injection vulnerability
- Shazzad Hossain Khan W4 Post List
- SQL injection
Not analysed yet 23 Sept 2026
CVE-2023-27413 CVE record

CVSS 6.5 Medium

WordPress W4 Post List Plugin <= 2.4.4 is vulnerable to Cross Site Scripting (XSS)
- Shazzad Hossain Khan W4 Post List
- Cross-site scripting (XSS)
Not analysed yet 22 Jun 2023