CVE-2023-1273 — ND Shortcodes < 7.0 - Subscriber+ LFI
The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenti…
Published: 2023-07-04 · CVSS: Unscored
The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7