Beveiligingsadvies

CVE-2024-7381

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-09-05 11:00:15

Laatst bijgewerkt 2026-04-08 16:51:54

Toegewezen door Wordfence

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to missing authorization and capability checks on the ajax__shortcode_cache function in all versions up to, and including, 8.6.9. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the target site.

← Alle CVE's bekijken Bekijk op cve.org ↗