Nicdark Nd Shortcodes
3 CVEs affecting Nicdark Nd Shortcodes. Latest disclosed: 2024-05-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-1273 | High | 8.8 | 2023-07-04 | The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, all… |
CVE-2024-5220 | Medium | 6.4 | 2024-05-25 | The ND Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's upload feature in all versions up to, and including, 7.5 d… |
CVE-2022-4623 | Medium | 5.4 | 2023-07-04 | The ND Shortcodes WordPress plugin before 7.0 does not validate and escape numerous of its shortcode attributes before outputting them back in a page/post wher… |