Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/02/20 1:26 p.m.1 views

CVE-2026-27074

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through = 6.5.1...

6.5CVSS5.5AI score0.00045EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 9:16 a.m.2 views

CVE-2026-27074

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through = 6.5.1...

6.5CVSS0.00045EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/19 8:27 a.m.2 views

CVE-2026-27074 WordPress Shortcoder plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through = 6.5.1...

6.5CVSS5.9AI score0.00045EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/19 8:27 a.m.25 views

CVE-2026-27074 WordPress Shortcoder plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through = 6.5.1...

6.5CVSS0.00045EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:27 a.m.1 views

CVE-2026-27074

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through = 6.5.1...

5.5AI score0.00045EPSS
Exploits0References2
CVE
CVE
added 2026/02/19 8:27 a.m.6 views

CVE-2026-27074

The CVE-2026-27074 entry describes a stored Cross-Site Scripting (XSS) vulnerability in the WordPress Shortcoder plugin (Shortcoder). Affected: Shortcoder versions up to and including 6.5.1. Root cause: improper neutralization of input during web page generation. Impact: stored XSS could allow an...

6.5CVSS5.4AI score0.00045EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.3 views

PT-2026-20768

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through = 6.5.1...

5.5AI score0.00045EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.3 views

WordPress plugin shortcoder 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. WordPress...

6.5CVSS5.7AI score0.00045EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/09 5:40 p.m.2 views

WordPress Shortcoder plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by thifx in WordPress Plugin Shortcoder versions = 6.5.1...

5.4AI score0.00045EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 9:28 a.m.19 views

CVE-2023-49849

Missing Authorization vulnerability in vaakash Shortcoder shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcoder: from n/a through = 6.3...

4.3CVSS7.3AI score0.00128EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-53757

Malicious code in bioql PyPI...

4.3CVSS9.1AI score0.00128EPSS
Exploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.10 views

CVE-2023-49849

Missing Authorization vulnerability in vaakash Shortcoder shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcoder: from n/a through = 6.3...

4.3CVSS0.00128EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:30 a.m.24 views

CVE-2023-49849 WordPress Shortcoder plugin <= 6.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in vaakash Shortcoder shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcoder: from n/a through = 6.3...

4.3CVSS8.5AI score0.00128EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/09 11:30 a.m.14 views

CVE-2023-49849 WordPress Shortcoder plugin <= 6.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in vaakash Shortcoder shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcoder: from n/a through = 6.3...

4.3CVSS0.00128EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.2 views

WordPress plugin Shortcoder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.7AI score0.00128EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/12/06 12:0 a.m.11 views

WordPress Shortcoder Plugin <= 6.3 is vulnerable to Broken Access Control

Software Shortcoder Type Plugin Vulnerable versions = 6.3 Fixed in 6.3.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-49849 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID f8adf2be0194 Credits Abdi Pranata Required privileg...

6.5AI score0.00128EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder