CVE Database /
CVE-2023-23800
CVE · High
CVE-2023-23800 — Shortcodes Ultimate – Content Elements [shortcodes-ultimate] < 5.12.7
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-23800
|
Shortcodes Ultimate – Content Elements [shortcodes-ultimate] < 5.12.7 |
Server-Side Request Forgery (SSRF) |
High
7.1
|
< 5.12.7
|
5.12.7 |
2023-02-10 |
—
|
CVE-2023-23800
The Shortcodes Ultimate plugin before version 5.12.7 contains a server-side request forgery vulnerability that allows attackers to force a website to make requests to arbitrary domains specified by the attacker. This flaw could enable malicious actors to access sensitive information or perform unauthorized actions by routing requests through the vulnerable site. The security issue was identified by Rafie Muhammad and has been resolved in version 5.12.7 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings