doublesharp

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

doublesharp records in CISA KEV

No doublesharp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Remote Content Shortcode 1 record LOW

Records

2 records

TI-2024-01946 CVE-2024-2090 · GHSA-28v8-9mr3-438f

Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery

LOW 28

The Remote Content Shortcode plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5 via the remote_content shortcode.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0026 Published 2024-08-01 No fix listed CWE-918

TI-2024-01945 CVE-2024-2089

Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 24

The Remote Content Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'remote_content' shortcode in all versions up to, and including, 1.5 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00267 Published 2024-05-30 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0