VYPR

The Special Text Boxes

by The Special Text Boxes

CVEs (1)

  • CVE-2024-8481HigSep 25, 2024
    risk 0.41cvss 7.3epss 0.01

    The The Special Text Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.2.4. This is due to the plugin adding the filter add_filter('comment_text', 'do_shortcode'); which will run all shortcodes in comments. This…