Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Jozoor Component: Shortcode Cleaner Lite Clear all filters
TI-2025-01272 CVE-2025-1481 · GHSA-f9g7-6m23-3v43

Shortcode Cleaner Lite <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Export

Priority LOW 29

The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the download_backup() function in all versions up to, and including, 1.0.9.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00329 Published 2025-03-08 No fix listed CWE-862