| |
Vulnerability CVE-2023-1273
Published: 2023-07-04
| Description: |
The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks |
Type:
CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
References: |
https://wpscan.com/vulnerability/0805ed7e-395d-48de-b484-6c3ec1cd4b8e
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
