4 matches found
CVE-2024-4135
CVE-2024-4135 affects the WP Latest Posts WordPress plugin, vulnerable in all versions up to 5.0.7. Unauthenticated attackers can trigger arbitrary shortcodes due to unvalidated user input used by do_shortcode. CVSS v3.1 base score 5.4 (Medium). A patched version exists; remediation is to update ...
WordPress WP Latest Posts plugin <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
Authenticated Subscriber+ Arbitrary Shortcode Execution vulnerability discovered by stealthcopter in WordPress Plugin WP Latest Posts versions = 5.0.7...
PT-2024-29368
Name of the Vulnerable Software and Affected Versions WP Latest Posts plugin for WordPress versions up to, and including, 5.0.7 Description The issue is due to the plugin allowing users to execute an action that does not properly validate a user-supplied value prior to using that value in a call ...
