Vulnerabilities / WP Sort Order
WP Sort Order vulnerabilities
Advisories WPSec published for WP Sort Order. Other sources may list more. Its attack surface: WP Sort Order on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2343 | WP Sort Order <= 1.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Extras Order Setting | Medium 4.4 | 1.3.7 |
| 2026-11-03 | WPSEC-2026-2342 | WP Sort Order <= 1.3.6 - Missing Authorization to Unauthenticated Sort Order Refresh | Medium 5.3 | 1.3.7 |
License: CC BY 4.0