Skip to content
OpenAdvisories

Vendor

mandooox

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Shortcode Cleaner Lite <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Export

    The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the download_backup() function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, w…