Security Advisory
CVE-2023-1273
8.8
HIGH
Vulnerability Description
The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks
Published Date
July 4, 2023
Official Source
NIST NVD Advisory