Unrated severityNVD Advisory· Published Mar 20, 2023· Updated Feb 25, 2025
Shortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosure
CVE-2023-0911
Description
The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not validate the user meta to be retrieved via the user shortcode, allowing any authenticated users such as subscriber to retrieve arbitrary user meta (except the user_pass), such as the user email and activation key by default.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <5.12.8
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/35404d16-7213-4293-ac0d-926bd6c17444mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.