توضیحات
Very customizable plugin to list posts by category (or tag, author and more) in a post, page or widget. Uses the [catlist] shortcode to select posts.
تغییرات این نسخه
See CHANGELOG.md for full Changelog.
0.95.0
Bugfix: Removes double slash in pagination code. Fixes https://github.com/picandocodigo/List-Category-Posts/issues/531.
Addresses potential security vulnerability CVE-2026-3005
Bugfix: lcp_title_limit corrupts multibyte characters in fallback path. Fixes https://github.com/picandocodigo/List-Category-Posts/issues/549. Thanks @jmingau for the report and fix!
0.94.0
Addresses CVE-2026-0553.
Addresses potential debug warning: Undefined array key QUERY_STRING. Report: https://wordpress.org/support/topic/php-8-4-issue-2/
Escapes html for thumbnail class.
0.93.1
Fixes a bug with post_status introduced in sanitize_status. Thanks Galen Charlton (@gmcharlt) for the catch and fix!
0.93.0
Don’t skip password protected filter when showing content.
Sanitize post_status so some posts are only shown if user is Editor or Administrator.
Addresses reported vulnerability: CVE-2025-11377, Authenticated (Contributor+) Information Exposure. Severity Score: 4.3 (Medium). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. Organization: Wordfence. Vulnerability Researcher(s): Athiwat Tiprasaharn (Jitlada)
This is a low risk vulnerability that could potentially be executed by an authenticated attacker, with contributor-level access and above. But it should be fixed with this version.
0.92.0
Avoids potential SQL injection in starting_with parameter – CVE-2025-10163. This solves SQL injection and results in starting_with working as per
0.95.0
Bugfix: Removes double slash in pagination code. Fixes https://github.com/picandocodigo/List-Category-Posts/issues/531.
Addresses potential security vulnerability CVE-2026-3005
Bugfix: lcp_title_limit corrupts multibyte characters in fallback path. Fixes https://github.com/picandocodigo/List-Category-Posts/issues/549. Thanks @jmingau for the report and fix!
0.94.0
Addresses CVE-2026-0553.
Addresses potential debug warning: Undefined array key QUERY_STRING. Report: https://wordpress.org/support/topic/php-8-4-issue-2/
Escapes html for thumbnail class.
0.93.1
Fixes a bug with post_status introduced in sanitize_status. Thanks Galen Charlton (@gmcharlt) for the catch and fix!
0.93.0
Don’t skip password protected filter when showing content.
Sanitize post_status so some posts are only shown if user is Editor or Administrator.
Addresses reported vulnerability: CVE-2025-11377, Authenticated (Contributor+) Information Exposure. Severity Score: 4.3 (Medium). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. Organization: Wordfence. Vulnerability Researcher(s): Athiwat Tiprasaharn (Jitlada)
This is a low risk vulnerability that could potentially be executed by an authenticated attacker, with contributor-level access and above. But it should be fixed with this version.
0.92.0
Avoids potential SQL injection in starting_with parameter – CVE-2025-10163. This solves SQL injection and results in starting_with working as per