cbcvebase.

Themeisle Woody Code Snippets vulnerabilities

1 known vulnerability affecting themeisle/woody_code_snippets.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2017-20251P2CRITICALCVSS 9.8fixed in 3.3.12026-06-09
CVE-2017-20251 [CRITICAL] CWE-94 CVE-2017-20251: WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that al WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes through the WordPress REST API. Attackers can send POST requests to the wp-json/wp/v2/posts endpoint with crafted content containing insert_php shortcodes
nvd
Themeisle Woody Code Snippets vulnerabilities | cvebase