CVE-2024-9581

Summary

CVE-2024-9581 is a vulnerability affecting the Shortcodes AnyWhere plugin for WordPress. The issue permits arbitrary shortcode execution, which can be exploited by unauthenticated attackers. This vulnerability arises due to the plugin failing to validate user-supplied values before running the do_shortcode function. The consequence of this flaw is that attackers can execute any shortcode they desire, potentially leading to a serious security breach. Versions up to and including 1.0.1 of the Shortcodes AnyWhere plugin are impacted.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.