Medium severity4.3NVD Advisory· Published Jul 11, 2022· Updated Jun 17, 2026
CVE-2022-1956
CVE-2022-1956
Description
The Shortcut Macros WordPress plugin through 1.3 does not have authorisation and CSRF checks in place when updating its settings, which could allow any authenticated users, such as subscriber, to update them.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=1.3+ 1 more
- (no CPE)range: <=1.3
- (no CPE)range: <=1.3
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/ef6d0393-0ce3-465c-84c8-53bf8c58958anvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.