A vulnerability has been found in fernandobt List Category Posts Plugin up to 0.94.0 on WordPress and classified as problematic. Affected by this issue is the function catlist of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2026-3005. Remote exploitation of the attack is possible.
| Vendor | Product | Versions |
|---|---|---|
| fernandobt | list category posts | 0 |
Updated description with more technical detail and marked the vulnerability as actively exploited.
Initial creation
