WordPress plugin Themify Shortcodes has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability exists in the WordPress plugi...

PT-2024-31721

Name of the Vulnerable Software and Affected Versions: Themify Shortcodes plugin for WordPress versions up to and including 2.0.9 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the themify button shortcode. This allows...

WordPress Themify Shortcodes plugin <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via themifybutton Shortcode vulnerability discovered by Francesco Carlucci in WordPress Plugin Themify Shortcodes versions = 2.0.9...