Skip to content
OpenAdvisories

Vendor

cmorillas1

5 known vulnerabilities.

Products

Shortcodes Blocks Creator Ultimate 4 External Database Based Actions 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2024-54264

    WordPress Shortcodes Blocks Creator Ultimate plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmorillas1 Shortcodes Blocks Creator Ultimate ultimate-shortcodes-creator allows Reflected XSS.This issue affects Shortcodes Blocks Creator Ultimate: from n/…

    cmorillas1 Shortcodes Blocks Creator Ultimate
  • High 7.5
    CVE-2024-10311

    External Database Based Actions <= 0.1 - Authenticated (Subscriber+) Authentication Bypass

    The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.1. This is due to a missing capability check in the 'edba_admin_handle' function. This makes it possible for authenticated atta…

    cmorillas1 External Database Based Actions Web / CMS