VYPR

Wp Meta Sort Posts

by WordPress

CVEs (1)

  • CVE-2026-8940MedJun 9, 2026
    risk 0.28cvss 4.3epss

    The WP Meta Sort Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9. This is due to missing or incorrect nonce validation on the top-level included script in msp-options.php. This makes it possible for unauthenticated…