Lucene search
PRIOn knowledge basePRION:CVE-2022-4946HistoryJun 05, 2023 - 2:15 p.m.
Code injection
2023-06-0514:15:00
PRIOn knowledge base
www.prio-n.com
2
wordpress
plugin
code injection
security vulnerability
shortcode
redirect
0.001 Low
EPSS
Percentile
23.6%
The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode, which could allow users with a role as low as contributor to add a malicious shortcode to a page/post, which will redirect users to an arbitrary domain.
| CPE | Name | Operator | Version |
|---|---|---|---|
| frontend_post_wordpress_plugin | le | 2.8.4 |
Related
cve
cve
CVE-2022-4946
2023-06-05 14:15:09
wpexploit
wpexploit
Frontend Post WordPress Plugin <= 2.8.4 - Contributor+ Arbitrary Redirect
2023-05-11 00:00:00
nvd
nvd
CVE-2022-4946
2023-06-05 14:15:09
wpvulndb
wpvulndb
Frontend Post WordPress Plugin <= 2.8.4 - Contributor+ Arbitrary Redirect
2023-05-11 00:00:00
cvelist
cvelist
wordfence
wordfence