Vulnerabilities

TI-2023-11069 CVE-2023-25798 · GHSA-5v5w-p7v7-j92q

WordPress Olevmedia Shortcodes Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Olevmedia Olevmedia Shortcodes plugin <= 1.1.9 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00361 Published 2023-05-03 No fix listed CWE-79

TI-2023-00162 CVE-2023-0168 · GHSA-prc8-xw56-qx9j

Olevmedia Shortcodes <= 1.1.9 - Contributor+ Stored XSS

MEDIUM 58

The Olevmedia Shortcodes WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0049 Published 2023-02-27 No fix listed

TI-2015-07798 CVE-2015-9421 · GHSA-wmr9-v7mw-p887

The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS…

LOW 30

The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00867 Published 2019-09-26 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Olevmedia Shortcodes Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Olevmedia Shortcodes <= 1.1.9 - Contributor+ Stored XSS

The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS…