Filtered by vendor Accesspressthemes Subscriptions
Filtered by product Frontend Post Wordpress Plugin Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-4946 1 Accesspressthemes 1 Frontend Post Wordpress Plugin 2024-08-03 5.4 Medium
The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode, which could allow users with a role as low as contributor to add a malicious shortcode to a page/post, which will redirect users to an arbitrary domain.