Unrated severityNVD Advisory· Published Jul 4, 2023· Updated Nov 25, 2024
ND Shortcodes < 7.0 - Subscriber+ LFI
CVE-2023-1273
Description
The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: < 7.0
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/0805ed7e-395d-48de-b484-6c3ec1cd4b8emitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.