CVE-2026-120843: WordPress Posts Table with Search & Sort plugin <= 1.4.14 - Cross Site Scripting (XSS) vulnerability

Q: What access and user interaction are required to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges and that a user must interact with attacker-controlled content. The issue is remotely reachable and has low attack complexity.

Q: What impact can successful exploitation have?

This is a stored XSS issue with scope changed, meaning injected script may affect a different security authority or user context. The reported impacts on confidentiality, integrity, and availability are each low.

Q: Which plugin versions are affected?

Posts Table with Search & Sort is affected through version 1.4.14. The provided data does not identify a fixed version.

Published Nov 3, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Barn2 Plugins Posts Table with Search & Sort posts-data-table allows Stored XSS.This issue affects Posts Table with Search & Sort: from n/a through 1.4.14.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Posts Table with Search & Sort to a version that resolves this vulnerability.
Fixed in 1.4.15

Event History

Nov 3, 2026

CVE Published

via MITRE·04:51 PM

Data Sourced

via MITRE·04:51 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access and user interaction are required to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges and that a user must interact with attacker-controlled content. The issue is remotely reachable and has low attack complexity.

What impact can successful exploitation have?

This is a stored XSS issue with scope changed, meaning injected script may affect a different security authority or user context. The reported impacts on confidentiality, integrity, and availability are each low.

Which plugin versions are affected?

Posts Table with Search & Sort is affected through version 1.4.14. The provided data does not identify a fixed version.

CVE-2026-120843: WordPress Posts Table with Search & Sort plugin <= 1.4.14 - Cross Site Scripting (XSS) vulnerability

Remediation

Event History

Frequently Asked Questions

What access and user interaction are required to exploit this issue?

What impact can successful exploitation have?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What access and user interaction are required to exploit this issue?

What impact can successful exploitation have?

Which plugin versions are affected?