Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2022-4946

Frontend Post WordPress Plugin <= 2.8.4 - Contributor+ Arbitrary Redirect

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode, which could allow users with a role as low as contributor to add a malicious shortcode to a page/post, which will redirect users to an arbitrary domain.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Frontend Post WordPress Plugin

Default version status: affected

  • 0 to ≤ 2.8.4affected

References