CVE-2024-8481

The The Special Text Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.2.2. This is due to the plugin adding the filter addfilter'commenttext', 'doshortcode'; which will run all shortcodes in comments. This makes it possible for...

PT-2024-39045 · WordPress · Simple Spoiler

Name of the Vulnerable Software and Affected Versions: The Simple Spoiler plugin for WordPress versions 1.2 to 1.3 Description: The issue is due to the plugin adding the filter add filter'comment text','do shortcode', which runs all shortcodes in comments. This allows unauthenticated attackers to...