Vulnerabilities / Better Post & Filter Widgets for Elementor
Better Post & Filter Widgets for Elementor vulnerabilities
Advisories WPSec published for Better Post & Filter Widgets for Elementor. Other sources may list more. Its attack surface: Better Post & Filter Widgets for Elementor on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-26 | WPSEC-2026-1651 | Better Post & Filter Widgets for Elementor <= 1.9.1 - Authenticated (Subscriber+) Sensitive Information Exposure via Filter REST Route | Low 3.1 | 1.9.2 |
| 2026-10-26 | WPSEC-2026-1650 | Better Post & Filter Widgets for Elementor <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Repeater Dynamic Tag Title Tags | Medium 6.4 | 1.9.2 |
| 2026-10-26 | WPSEC-2026-1649 | Better Post & Filter Widgets for Elementor <= 1.9.1 - Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tags | Medium 4.3 | 1.9.2 |
| 2026-10-26 | WPSEC-2026-1648 | Better Post & Filter Widgets for Elementor <= 1.9.1 - Authenticated (Contributor+) Missing Authorization to Post Publication via Post Status Toggle | Medium 4.3 | 1.9.2 |
License: CC BY 4.0