Vulnerabilities / Simple Staff List
Simple Staff List vulnerabilities
Advisories WPSec published for Simple Staff List. Other sources may list more. Its attack surface: Simple Staff List on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-04 | WPSEC-2026-2496 | Simple Staff List <= 2.2.5 - Authenticated (Editor+) Stored Cross-Site Scripting via Staff List Template | Medium 4.4 | 2.2.6 |
| 2026-11-04 | WPSEC-2026-2495 | Simple Staff List <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group' Shortcode Attribute | Medium 6.4 | 2.2.6 |
License: CC BY 4.0