WordPress Shortcodes Ultimate <= 5.0.0 - Authenticated Remote Code Execution

Shortcodes Ultimate plugin before 5.0.1 for WordPress contains a remote code execution caused by a filter in meta, post, or user shortcode, letting remote attackers execute arbitrary code, exploit requires sending crafted shortcode data. id: CVE-2017-18580 info: name: WordPress Shortcodes Ultimat...

CVE-2017-18580

The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode...

CVE-2017-18580

The shortcodes-ultimate plugin for WordPress (versions before 5.0.1 ) contains a remote code execution vulnerability. The root cause is an input validation error within a filter used for meta, post, or user shortcodes . An attacker can exploit this by sending crafted shortcode data to execute arb...