Kylebjohnson

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Kylebjohnson records in CISA KEV

No Kylebjohnson vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

User Shortcodes Plus 1 record LOW

Records

1 record

TI-2023-06371 CVE-2023-6969 · GHSA-qr34-vp25-pg2x

Authorization bypass in kbjohnson90 User Shortcodes Plus

LOW 26

The User Shortcodes Plus plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.2 via the user_meta shortcode due to missing validation on a user controlled key.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00468 Published 2024-03-13 No fix listed CWE-639

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0