Olevmedia Shortcodes Security Vulnerabilities and Issues — Olevmedia Shortcodes CVE List

Lucene search

OlevmediaOlevmedia Shortcodes

3 matches found

CVE•added 2019/09/26 1:15 a.m.•124 views

CVE-2015-9421

The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter.

6.5CVSS6.2AI score0.00186EPSS

CVE•added 2023/02/27 4:15 p.m.•55 views

CVE-2023-0168

The Olevmedia Shortcodes WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

5.4CVSS5.3AI score0.00103EPSS

CVE•added 2023/05/03 12:16 p.m.•27 views

CVE-2023-25798

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Olevmedia Olevmedia Shortcodes plugin

6.5CVSS5.4AI score0.00077EPSS