← WordPress Vulnerabilities
WordPress security by component

Post Status Notifier Lite

Post Status Notifier Lite is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jul 23, 2026; the highest CVE/CNA score is 7.1.

Plugin slug: post-status-notifier-lite

CVE-2026-9577: Post Status Notifier Lite: Cross-site scripting

Post Status Notifier Lite is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is < 1.13.0.

PublishedJul 23, 2026
Known safe version1.13.0
Safe version
Jul 23, 2026 CVE-2026-9577
Post Status Notifier Lite: Cross-site scripting
Post Status Notifier Lite is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is < 1.13.0.
1.13.0
CVE4.8
NVDPending
Nov 22, 2023 CVE-2023-47766
Post Status Notifier Lite: Cross-site scripting
Post Status Notifier Lite is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVD6.1
Jan 09, 2023 CVE-2022-4325
Post Status Notifier Lite: Cross-site scripting
Post Status Notifier Lite is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.1
NVD6.1