Lucene search

K
patchstackP7e4PATCHSTACK:2D9CD22257ABBE002CBBF0954DBDD44B
HistoryApr 19, 2022 - 12:00 a.m.

WordPress Custom TinyMCE Shortcode Button plugin <= 1.1 - Reflected Cross-Site Scripting (XSS) vulnerability

2022-04-1900:00:00
p7e4
patchstack.com
20

0.001 Low

EPSS

Percentile

40.3%

Reflected Cross-Site Scripting (XSS) vulnerability discovered by p7e4 in WordPress Custom TinyMCE Shortcode Button plugin (versions <= 1.1).

Solution

Deactivate and delete. This plugin has been closed as of April 4, 2022 and is not available for download. This closure is temporary, pending a full review.

CPENameOperatorVersion
custom tinymce shortcode buttonle1.1

0.001 Low

EPSS

Percentile

40.3%

Related for PATCHSTACK:2D9CD22257ABBE002CBBF0954DBDD44B