Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/14 12:00 a.m.•1 views

CVE-2024-10690: Authorization Bypass Through User-Controlled Key

The Shortcodes for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.4 via the 'SHORTCODEELEMENTOR' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...

4.3CVSS5.7AI score0.00302EPSS
SaveExploits0References1
Rows per page
Query Builder