WordPress plugin SiteOrigin Widgets Bundle 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2025-9489

CVE-2025-9489 affects the WP-Members Membership Plugin for WordPress. The vulnerability allowsAuthenticated users with Subscriber+ to execute arbitrary shortcodes via do_shortcode due to insufficient input validation in profile-related shortcode handling. Impact is arbitrary shortcode execution w...

CVE-2025-2802

The LayoutBoxx plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.3.1. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

WordPress plugin WP-Recall 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-13792

The CVE CVE-2024-13792 affects the WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress (up to v3.3.2). The root cause is improper validation of a value before do_shortcode is executed, allowing unauthenticated attackers to trigger arbitrary shortcodes. This leads to arbitrary ...

CVE-2024-13495 GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function

The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via the gamipressajaxgetlogs function in all versions up to, and including, 7.2.1. This is due to the software allowing users to...

PT-2024-39832 · WordPress · Uix Shortcodes

Name of the Vulnerable Software and Affected Versions: The Uix Shortcodes – Compatible with Gutenberg plugin for WordPress versions up to, and including, 1.9.9 Description: The issue is related to arbitrary shortcode execution due to the software allowing users to execute an action that does not...