CVE-2026-32419

The List category posts plugin for WordPress contains a vulnerability affecting versions prior to 0.93.1, where inadequate filtering of input data allows malicious users with elevated privileges to embed executable code snippets within certain webpage content. This embedded code is executed when the affected page is accessed by another user, potentially leading to unauthorized actions or information disclosure.

Based on public CVE data (MITRE/NVD).