cmorillas1
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Shortcodes Blocks Creator Ultimate | 4 | – | Dec 13, 2024 |
| External Database Based Actions | 1 | – | Nov 15, 2024 |
Exploited and recent CVEs
- CVE-2024-54264 WordPress Shortcodes Blocks Creator Ultimate plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-12167 Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via _wpnonce 0.3%
- CVE-2024-12166 Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via 'page' 0.3%
- CVE-2024-10311 External Database Based Actions <= 0.1 - Authenticated (Subscriber+) Authentication Bypass 0.4%
- CVE-2024-10340 Shortcodes Blocks Creator Ultimate <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%