Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6f4q-h249-vf5q

Опубликовано: 13 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to do_shortcode being hooked through the comment_text filter in all versions up to and including 1.4.2. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the target site.

The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to do_shortcode being hooked through the comment_text filter in all versions up to and including 1.4.2. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the target site.

EPSS

Процентиль: 83%
0.02034
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 5.3
nvd
около 1 года назад

The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to do_shortcode being hooked through the comment_text filter in all versions up to and including 1.4.2. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the target site.

EPSS

Процентиль: 83%
0.02034
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862