CVE-2022-38086

Description

References

• patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-0-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
• wordpress.org/plugins/shortcodes-ultimate · Product

Mais vulnerabilidades de shortcodes ultimate

• CVE-2025-5567MÉDIO 5.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-url' DOM elem…
• CVE-2024-8500MÉDIO 5.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the several parameters …
• CVE-2024-6766MÉDIO 5.4The shortcodes-ultimate-pro WordPress plugin before 7.2.1 does not validate and escape some of its shortcode attributes before outputting th…
• CVE-2024-4217MÉDIO 4.7The shortcodes-ultimate-pro WordPress plugin before 7.1.5 does not properly escape some of its shortcodes' settings, making it possible for …
• CVE-2024-4821MÉDIO 5.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's su_lightbo…