CVE-2023-1273: vulnerability in ND Shortcodes
ND Shortcodes < 7.0 - Subscriber+ LFI
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.7%
The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks
Affected products
Unknown · ND ShortcodesRelated CVEs — ND Shortcodes
In the same product, most dangerous first.