Vulnerabilities

TI-2024-01946 CVE-2024-2090 · GHSA-28v8-9mr3-438f

Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery

LOW 28

The Remote Content Shortcode plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5 via the remote_content shortcode.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0026 Published 2024-08-01 No fix listed CWE-918

TI-2024-01945 CVE-2024-2089

Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 24

The Remote Content Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'remote_content' shortcode in all versions up to, and including, 1.5 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00267 Published 2024-05-30 No fix listed CWE-79

Vulnerabilities

Filters

Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery

Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting