Skip to content
OpenAdvisories

Product · Crowd Favorite

CF Internal Link Shortcode

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2024-12404 Public exploit

    CF Internal Link Shortcode <= 1.1.0 - Unauthenticated SQL Injection

    The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection via the 'post_title' parameter in all versions up to, and including, 1.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…