Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/03/10 2:45 a.m.•15 views

CVE-2025-1481

The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloadbackup function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

6.5CVSS6.8AI score0.00323EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/08 3:15 a.m.•13 views

CVE-2025-1481

The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloadbackup function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

4.3CVSS7.4AI score0.00323EPSS
SaveExploits0References3
NVD
NVD
•added 2025/03/08 3:15 a.m.•12 views

CVE-2025-1481

The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloadbackup function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

6.5CVSS0.00323EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/03/08 2:24 a.m.•9 views

CVE-2025-1481 Shortcode Cleaner Lite <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Export

The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloadbackup function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

6.5CVSS6.8AI score0.00323EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/03/08 2:24 a.m.•35 views

CVE-2025-1481 Shortcode Cleaner Lite <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Export

The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloadbackup function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

6.5CVSS0.00323EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/03/08 12:00 a.m.•11 views

WordPress plugin Shortcode Cleaner Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS8.5AI score0.00323EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/08 12:00 a.m.•0 views

CVE-2025-1481: Missing Authorization

The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the downloadbackup function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

6.5CVSS5.8AI score0.00323EPSS
SaveExploits0References1
Rows per page
Query Builder