Lucene search

K

CVE-2023-0911

🗓️ 20 Mar 2023 16:12:15Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov👁 54 Views🌐 WEB

The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 vulnerabilit

Show more
Related
Detection
Affected
Refs
Paths
Nvd
Vulners
Node
[
  {
    "vendor": "Unknown",
    "product": "WordPress Shortcodes Plugin — Shortcodes Ultimate",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "5.12.8"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]
ParameterPositionPathDescriptionCWE
actionrequest body/wp-admin/admin-ajax.phpAllows authenticated users to retrieve arbitrary user meta via user shortcode.CWE-862
shortcoderequest body/wp-admin/admin-ajax.phpAllows authenticated users to retrieve arbitrary user meta via user shortcode.CWE-862

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
20 Mar 2023 16:15Current
6.7Medium risk
Vulners AI Score6.7
CVSS36.5
EPSS0.00222
SSVC
54
.json
Report