Slim Seo Ai Seo Plugin Lightweight Fast Automated
Monthly
Arbitrary shortcode execution in the Slim SEO WordPress plugin (all versions up to and including 4.11.1) allows an authenticated attacker holding a Subscriber-level account to store a shortcode payload in their own Biographical Info field, which the plugin subsequently passes to do_shortcode when rendering that author's description on the front end. Exploitation is gated by concrete prerequisites - an attacker-controlled low-privilege account (in practice, open user registration), a front-end request that resolves the author description without redirection (the ?author= query parameter while Slim SEO's auto_redirection setting is disabled), and the presence of other plugins whose shortcodes are worth invoking - and the resulting impact depends on which shortcodes other installed plugins expose, making this a moderate, authentication-gated code-injection issue rather than a top-priority emergency. No public exploit identified at time of analysis, and the vendor shipped a fix in 4.11.2 that strips shortcodes from the user bio.
Arbitrary shortcode execution in the Slim SEO WordPress plugin (all versions up to and including 4.11.1) allows an authenticated attacker holding a Subscriber-level account to store a shortcode payload in their own Biographical Info field, which the plugin subsequently passes to do_shortcode when rendering that author's description on the front end. Exploitation is gated by concrete prerequisites - an attacker-controlled low-privilege account (in practice, open user registration), a front-end request that resolves the author description without redirection (the ?author= query parameter while Slim SEO's auto_redirection setting is disabled), and the presence of other plugins whose shortcodes are worth invoking - and the resulting impact depends on which shortcodes other installed plugins expose, making this a moderate, authentication-gated code-injection issue rather than a top-priority emergency. No public exploit identified at time of analysis, and the vendor shipped a fix in 4.11.2 that strips shortcodes from the user bio.