Lucene search
HistoryNov 08, 2022 - 7:15 p.m.
CVE-2022-41136
cve-2022-41136
csrf
xss
shortcodes ultimate plugin
wordpress
vladimir anokhin
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.9%
Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Vladimir Anokhin’s Shortcodes Ultimate plugin <= 5.12.0 on WordPress.
Affected configurations
Node
vladimir_anokhinshortcodes_ultimate_\(wordpress_plugin\)Range≤5.12.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| getshortcodes:shortcodes_ultimate | getshortcodes shortcodes ultimate | le | 5.12.0 |
CNA Affected
[
{
"vendor": "Vladimir Anokhin",
"product": "Shortcodes Ultimate (WordPress plugin)",
"versions": [
{
"version": "<= 5.12.0",
"status": "affected",
"lessThanOrEqual": "5.12.0",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
patchstack
patchstack
nvd
nvd
CVE-2022-41136
2022-11-08 19:15:15
cvelist
cvelist
wpvulndb
wpvulndb
Shortcodes Ultimate < 5.12.1 - Stored XSS via CSRF
2022-10-12 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-11-08 19:15:00
openvas
openvas
WordPress Shortcodes Ultimate Plugin < 5.12.1 Multiple CSRF Vulnerabilities
2022-11-10 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.9%
Related for CVE-2022-41136