Lucene search
+L

19 matches found

RedhatCVE
RedhatCVE
•added 2026/02/20 1:26 p.m.•21 views

CVE-2026-27074

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through = 6.5.1...

6.5CVSS5.5AI score0.00238EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/19 9:16 a.m.•20 views

CVE-2026-27074

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through = 6.5.1...

6.5CVSS0.00238EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/19 8:27 a.m.•44 views

CVE-2026-27074

The CVE-2026-27074 entry describes a stored Cross-Site Scripting (XSS) vulnerability in the WordPress Shortcoder plugin (Shortcoder). Affected: Shortcoder versions up to and including 6.5.1. Root cause: improper neutralization of input during web page generation. Impact: stored XSS could allow an...

6.5CVSS5.8AI score0.00238EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/19 8:27 a.m.•10 views

CVE-2026-27074

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through = 6.5.1...

5.8AI score0.00238EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/19 8:27 a.m.•11 views

CVE-2026-27074 WordPress Shortcoder plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through = 6.5.1...

6.5CVSS5.8AI score0.00238EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/19 8:27 a.m.•50 views

CVE-2026-27074 WordPress Shortcoder plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through = 6.5.1...

6.5CVSS0.00238EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/19 12:00 a.m.•26 views

WordPress plugin shortcoder 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. WordPress...

6.5CVSS5.7AI score0.00238EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/19 12:00 a.m.•33 views

PT-2026-20768

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through = 6.5.1...

5.5AI score0.00238EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/19 12:00 a.m.•4 views

CVE-2026-27074: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vaakash Shortcoder shortcoder allows Stored XSS.This issue affects Shortcoder: from n/a through = 6.5.1...

6.5CVSS5.8AI score0.00238EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/01/09 5:40 p.m.•20 views

WordPress Shortcoder plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by thifx in WordPress Plugin Shortcoder versions = 6.5.1...

5.4AI score0.00238EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:28 a.m.•33 views

CVE-2023-49849

Missing Authorization vulnerability in vaakash Shortcoder shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcoder: from n/a through = 6.3...

4.3CVSS8.2AI score0.00415EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2023-53757

Malicious code in bioql PyPI...

4.3CVSS7.9AI score0.00415EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/09 1:15 p.m.•42 views

CVE-2023-49849

Missing Authorization vulnerability in vaakash Shortcoder shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcoder: from n/a through = 6.3...

4.3CVSS0.00415EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 11:30 a.m.•34 views

CVE-2023-49849 WordPress Shortcoder plugin <= 6.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in vaakash Shortcoder shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcoder: from n/a through = 6.3...

4.3CVSS0.00415EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:30 a.m.•33 views

CVE-2023-49849 WordPress Shortcoder plugin <= 6.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in vaakash Shortcoder shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcoder: from n/a through = 6.3...

4.3CVSS8.5AI score0.00415EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•6 views

PT-2024-13818

Name of the Vulnerable Software and Affected Versions Shortcoder versions n/a through 6.3 Description The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations For versions n/a through 6.3, update ...

4.3CVSS0.00415EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•16 views

WordPress plugin Shortcoder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.7AI score0.00415EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•6 views

CVE-2023-49849: Missing Authorization

Missing Authorization vulnerability in vaakash Shortcoder shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcoder: from n/a through = 6.3...

4.3CVSS5.9AI score0.00415EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2023/12/06 12:00 a.m.•22 views

WordPress Shortcoder Plugin <= 6.3 is vulnerable to Broken Access Control

Software Shortcoder Type Plugin Vulnerable versions = 6.3 Fixed in 6.3.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-49849 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID f8adf2be0194 Credits Abdi Pranata Required privileg...

6.5AI score0.00415EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder