CVE-2024-2732

CVE-2024-2732 affects the Themify Shortcodes plugin for WordPress, with Stored XSS in the themify_post_slider shortcode in all versions up to 2.0.8 due to insufficient input sanitization and output escaping of user-supplied attributes. Authenticated attackers with contributor-level access and abo...

CVE-2024-43133

CVE-2024-43133 is a Stored XSS vulnerability in Themify Shortcodes (Themify Shortcodes plugin) caused by improper input neutralization during web-page generation. Affected versions are Themify Shortcodes from n/a through 2.1.1. Public details confirm a Cross-Site Scripting issue, but the provided...

CVE-2024-4567

CVE-2024-4567 (Themify Shortcodes) is a stored XSS in the Themify Shortcodes WordPress plugin up to version 2.0.9. The vulnerability stems from insufficient input sanitization and output escaping in the themify_button shortcode attributes, allowing an authenticated attacker with contributor-level...