Skip to content
OpenAdvisories

Vendor

Crowd Favorite

3 known vulnerabilities.

Products

DXP ToolKit 2 CF Internal Link Shortcode 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2024-12404 Public exploit

    CF Internal Link Shortcode <= 1.1.0 - Unauthenticated SQL Injection

    The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection via the 'post_title' parameter in all versions up to, and including, 1.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…

    Crowd Favorite CF Internal Link Shortcode Web / CMS