Lucene search

K
wpvulndbWpvulndbWPVDB-ID:F63EBF7A-DFD1-42DD-85CE-77229A6A2C79
HistoryNov 23, 2023 - 12:00 a.m.

My Shortcodes <= 2.3 - Missing Authorization via Multiple AJAX Actions

2023-11-2300:00:00
wpscan.com
4
wordpress
plugin
vulnerability
ajax
unauthorized access

6.7 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

Description The My Shortcodes plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX actions in versions up to, and including, 2.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthorized actions.

6.7 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

Related for WPVDB-ID:F63EBF7A-DFD1-42DD-85CE-77229A6A2C79