CVE-2023-46129

Summary

CVE-2023-5237 is a vulnerability affecting the Memberlite Shortcodes plugin for WordPress. This issue occurs before version 1.3.9 and stems from a failure to validate and properly escape shortcode attributes. An attacker with a contributor role can exploit this flaw to execute Stored Cross-Site Scripting attacks. These attacks can potentially target high-privilege users, such as administrators, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.