CVE-2022-38086: WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability
Published Oct 11, 2022
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Shortcodes Ultimate plugin <= 5.12.0 at WordPress leading to plugin preset settings change.
Affected Software
1 affected component
Getshortcodes Shortcodes Ultimate Wordpress<=5.12.0
Remediation
Information
Update to 5.12.1 or a higher version.
Event History
Oct 11, 2022
CVE Published
via MITRE·07:35 PM
Data Sourced
via MITRE·07:35 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-38086?
CVE-2022-38086 is a Cross-Site Request Forgery (CSRF) vulnerability in the Shortcodes Ultimate plugin <= 5.12.0 for WordPress, which allows an attacker to change plugin preset settings.
2
How severe is CVE-2022-38086?
CVE-2022-38086 has a severity rating of 4.3 (medium).
3
Which software versions are affected by CVE-2022-38086?
The Shortcodes Ultimate plugin versions up to and including 5.12.0 for WordPress are affected by CVE-2022-38086.
4
How can I fix CVE-2022-38086?
To fix CVE-2022-38086, update the Shortcodes Ultimate plugin to a version higher than 5.12.0.
5
Where can I find more information about CVE-2022-38086?
You can find more information about CVE-2022-38086 on the Patchstack website and the official Shortcodes Ultimate plugin page on WordPress.org.