CVE-2024-9703

CVE-2024-9703 refers to the Arconix Shortcodes WordPress plugin. The vulnerability is a Stored Cross-Site Scripting flaw in the button shortcode, present in all versions up to and including 2.1.12, caused by insufficient input sanitization and output escaping on user-supplied attributes. It can b...

CVE-2024-10226

CVE-2024-10226 : Arconix Shortcodes for WordPress is vulnerable to Stored XSS via the box shortcode in versions ≤ 2.1.13 due to insufficient input sanitization and output escaping on user attributes. Exploitation requires authenticated access at contributor level or higher; injected scripts execu...

CVE-2024-56242

CVE-2024-56242 is a Stored XSS in Arconix Shortcodes for WordPress. The issue arises from improper input neutralization during web page generation, allowing attacker-controlled input to be rendered as executable script. Affected product: Arconix Shortcodes, affected versions listed as

CVE-2023-23703

CVE-2023-23703 corresponds to a Stored XSS in the WordPress plugin Arconix Shortcodes (vulnerable: 2.1.7 is the recommended remediation. Additional sources classify the issue as low severity with a low likelihood of exploitation, but it remains a real vulnerability for sites still running

CVE-2024-38769

CVE-2024-38769 : WordPress plugin Arconix Shortcodes versions = 2.1.12. If upgrading is not feasible, apply vendor guidance and monitor for advisories; no additional mitigations are specified in the provided documents.