CVE-2024-9578

MEDIO 5.3CVE-2024-9578 · Published 13/11/2024 · updated 17/06/2026

In breve

CVE-2024-9578 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda hide links (avovkdesign).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.55%, superiore al 46.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
hide links avovkdesign	`≤ 1.4.2`	No fix yet

Description

The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to do_shortcode being hooked through the comment_text filter in all versions up to and including 1.4.2. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the target site.

References

plugins.trac.wordpress.org/browser/hide-links/trunk/class.hidelinks.php · Product
wordfence.com/threat-intel/vulnerabilities/id/4198bbb2-3aff-492e-a781-b0c9477baf6c · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free