JS Archive List vulnerabilities

2 known vulnerabilities in JS Archive List from Skatox. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  JS Archive List: Deserialization of Untrusted Data

  CVE-2026-2020Mar 7, 2026Skatox

  The JS Archive List plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.1.7 via the 'included' shortcode attribute. This is due to the deserialization of untrusted input supplied via the 'included' parameter of th

• 7.5 High severity

  JS Archive List: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-7670Aug 19, 2025Skatox

  The JS Archive List plugin for WordPress is vulnerable to time-based SQL Injection via the build_sql_where() function in all versions up to, and including, 6.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on