Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WordPress Shortcodes Plugin — Shortcodes Ultimate 5.12.8 Clear all filters
TI-2023-00863 CVE-2023-0911 · GHSA-8c5m-67fx-9q72

Shortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosure

Priority MEDIUM 62

The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not validate the user meta to be retrieved via the user shortcode, allowing any authenticated users such as subscriber to retrieve…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00654 Published 2023-03-20 Fixed in 5.12.8 CWE-862
TI-2023-00842 CVE-2023-0890 · GHSA-vmwx-8pmg-4mrr

Shortcodes Ultimate < 5.12.8 - Subscriber+ Arbitrary Post Access

Priority MEDIUM 62

The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not ensure that posts to be displayed via some shortcodes are already public and can be accessed by the user making the request, a…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00654 Published 2023-03-20 Fixed in 5.12.8 CWE-862