Vulnerabilities (CVE)

Filtered by vendor Accesspressthemes Subscribe
Filtered by product Frontend Post Wordpress Plugin
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-4946 1 Accesspressthemes 1 Frontend Post Wordpress Plugin 2024-11-21 N/A 5.4 MEDIUM
The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode, which could allow users with a role as low as contributor to add a malicious shortcode to a page/post, which will redirect users to an arbitrary domain.