Unscored CVE-2017-2245 EUVD-2017-11428GHSA-6jjc-rhxj-wqfc

Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspec…

Published Jul 7, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Vladimir Anokhin Product: Shortcodes Ultimate

Description

Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Vladimir Anokhin	Shortcodes Ultimate	prior to version 4.10.0	—

References

https://plugins.trac.wordpress.org/changeset/1684377/#file217
99495 vdb-entry
JVN#63249051 third-party-advisory
https://wordpress.org/plugins/shortcodes-ultimate/#developers