Lucene search
PRIOn knowledge basePRION:CVE-2023-0911HistoryMar 20, 2023 - 4:15 p.m.
Default credentials
2023-03-2016:15:00
PRIOn knowledge base
www.prio-n.com
2
default credentials
user shortcode
arbitrary user meta
subscriber
nvd
security flaw
0.001 Low
EPSS
Percentile
29.7%
The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not validate the user meta to be retrieved via the user shortcode, allowing any authenticated users such as subscriber to retrieve arbitrary user meta (except the user_pass), such as the user email and activation key by default.
| CPE | Name | Operator | Version |
|---|---|---|---|
| shortcodes_ultimate | lt | 5.12.8 |
Related
cve
cve
CVE-2023-0911
2023-03-20 16:15:12
wpvulndb
wpvulndb
Shortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosure
2023-02-27 00:00:00
cvelist
cvelist
wpexploit
wpexploit
Shortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosure
2023-02-27 00:00:00
nvd
nvd
CVE-2023-0911
2023-03-20 16:15:12
openvas
openvas
wordfence
wordfence