Components For Wp Bakery Page Builder
1 CVEs
product
Monthly
The nd-shortcodes plugin before 6.0 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
Open Redirect
Components For Wp Bakery Page Builder
NVD
CVSS 3.0
6.1
EPSS
1.3%
EPSS 1%
CVSS 6.1
MEDIUM
POC
This Month
The nd-shortcodes plugin before 6.0 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
Open Redirect
Components For Wp Bakery Page Builder
NVD