Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Thom Stark Eyes Only: User Access Shortcode plugin <= 1.8.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Thom Stark | Eyes Only: User Access Shortcode | ≤ 1.8.2 | — |
Medium · 5.9
CVE-2023-25786
EUVD-2023-29683GHSA-2qvp-8c85-3h32
WordPress Eyes Only: User Access Shortcode Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)
Published May 3, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack