Lucene search
Francesco CarlucciPATCHSTACK:AFBB90E75158DD0AB26526AF48200E6FHistoryFeb 02, 2022 - 12:00 a.m.
WordPress Custom Content Shortcode plugin <= 4.0.1 - Authenticated Arbitrary File Access / Local File Inclusion (LFI) vulnerability
2022-02-0200:00:00
Francesco Carlucci
patchstack.com
7
wordpress
custom content
shortcode
plugin
vulnerability
update
lfi
EPSS
0.001
Percentile
23.0%
Authenticated Arbitrary File Access / Local File Inclusion (LFI) vulnerability discovered by Francesco Carlucci in WordPress Custom Content Shortcode plugin (versions <= 4.0.1).
Solution
Update the WordPress Custom Content Shortcode plugin to the latest available version (at least 4.0.2).
Related
prion
prion
Design/Logic Flaw
2022-03-07 09:15:00
cvelist
cvelist
wpvulndb
wpvulndb
Custom Content Shortcode < 4.0.2 - Authenticated Arbitrary File Access / LFI
2022-02-02 00:00:00
wpexploit
wpexploit
Custom Content Shortcode < 4.0.2 - Authenticated Arbitrary File Access / LFI
2022-02-02 00:00:00
cnvd
cnvd
WordPress plugin Custom Content Shortcode access control error vulnerability
2022-03-09 00:00:00
nvd
nvd
CVE-2021-24825
2022-03-07 09:15:08
cve
cve
CVE-2021-24825
2022-03-07 09:15:08