TI-2025-07842 CVE-2025-8562 · GHSA-9mgr-j5g2-cm6j
Custom Query Shortcode <= 0.4.0 - Authenticated (Contributor+) Path Traversal via lens Parameter
Priority LOW 29
The Custom Query Shortcode plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.4.0 via the 'lens' parameter.