ContentPen vulnerabilities
We track 1 vulnerability in ContentPen products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest ContentPen vulnerabilities
- 7.5 High severity
ContentPen: Improper Neutralization of Input During Web Page Generation
The ContentPen WordPress plugin before 1.1.1 discloses its REST API key to unauthenticated users, who can then use it to create posts containing unfiltered JavaScript, leading to Stored XSS that executes in the browser of any visitor, including administrators.