CVE-2024-11012 Notibar – Notification Bar for WordPress <= 2.1.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via njt_nofi_text

🗓️ 13 Dec 2024 09:28:27Reported by WordfenceType

Vulnerability in Notibar plugin allows shortcode execution for authenticated users with Subscriber access.

Reporter	Title	Published	Views	Family All 4
NVD	CVE-2024-11012	13 Dec 202410:15	–	nvd
CVE	CVE-2024-11012	13 Dec 202410:15	–	cve
Cvelist	CVE-2024-11012 Notibar – Notification Bar for WordPress <= 2.1.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via njt_nofi_text	13 Dec 202409:27	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 9, 2024 to December 15, 2024)	19 Dec 202417:13	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/notibar/trunk/includes/NotificationBar/WpCustomNotification.php
wordpress	www.wordpress.org/plugins/notibar/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/1766727d-ba54-4b46-b362-415c14be027d
plugins	www.plugins.trac.wordpress.org/changeset/3205224/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Dec 2024 09:27Current

7.2High risk

Vulners AI Score7.2

CVSS36.3

SSVC

CWE-94