The Shortcodes AnyWhere plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
EUVD-2024-50033 | The Shortcodes AnyWhere plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 15 Oct 2024 14:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:happyplugins:shortcodes_anywhere:*:*:*:*:*:wordpress:*:* |
Fri, 11 Oct 2024 21:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Happyplugins
Happyplugins shortcodes Anywhere |
|
CPEs | cpe:2.3:a:happyplugins:shortcodes_anywhere:*:*:*:*:*:*:*:* | |
Vendors & Products |
Happyplugins
Happyplugins shortcodes Anywhere |
|
Metrics |
ssvc
|
Thu, 10 Oct 2024 02:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | The Shortcodes AnyWhere plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. | |
Title | Shortcodes AnyWhere <= 1.0.1 - Unauthenticated Arbitrary Shortcode Execution | |
Weaknesses | CWE-94 | |
References |
| |
Metrics |
cvssV3_1
|

Status: PUBLISHED
Assigner: Wordfence
Published:
Updated: 2024-10-10T16:18:14.848Z
Reserved: 2024-10-07T14:09:09.152Z
Link: CVE-2024-9581

Updated: 2024-10-10T16:18:05.982Z

Status : Analyzed
Published: 2024-10-10T02:15:06.227
Modified: 2024-10-15T14:28:35.283
Link: CVE-2024-9581

No data.

No data.