Robfelty vulnerabilities
We track 3 vulnerabilities in Robfelty products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 13, 2026.
Latest Robfelty vulnerabilities
- 8.5 High severity
Collapsing Categories: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsing Categories collapsing-categories allows Blind SQL Injection.This issue affects Collapsing Categories: from n/a through <= 3.0.9.
- 8.5 High severity
Collapsing Archives: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsing Archives collapsing-archives allows Blind SQL Injection.This issue affects Collapsing Archives: from n/a through <= 3.0.7.
- 7.5 High severity
Collapsing Categories: Improper Neutralization of Special Elements used in an SQL Command
The Collapsing Categories plugin for WordPress is vulnerable to SQL Injection via the 'taxonomy' parameter of the /wp-json/collapsing-categories/v1/get REST API in all versions up to, and including, 3.0.8 due to insufficient escaping on the user supplied param