User Shortcodes Plus

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-6969 Mar 13, 16:15 MEDIUM This Month

The User Shortcodes Plus plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.2 via the user_meta shortcode due to missing validation on a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass User Shortcodes Plus Wordpress Plugin

NVD VulDB

CVSS 3.1

4.3

EPSS

0.2%

CVE-2023-6969

EPSS 0% CVSS 4.3

MEDIUM This Month

The User Shortcodes Plus plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.2 via the user_meta shortcode due to missing validation on a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass User Shortcodes Plus +1

NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy