CVE-2023-23800: WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF)
Server-Side Request Forgery (SSRF) vulnerability in Vova Anokhin WP Shortcodes Plugin — Shortcodes Ultimate.This issue affects WP Shortcodes Plugin — Shortcodes Ultimate: from n/a through 5.12.6.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-23800?
CVE-2023-23800 is a Server Side Request Forgery (SSRF) vulnerability in the WordPress Shortcodes Ultimate Plugin version 5.12.6 and below.
How does CVE-2023-23800 affect the Shortcodes Ultimate Plugin?
CVE-2023-23800 allows attackers to make requests to internal resources on behalf of the server, potentially leading to unauthorized access to sensitive information and resources.
What is the severity of CVE-2023-23800?
CVE-2023-23800 has a severity score of 7.1 (high).
How can I fix CVE-2023-23800 in the Shortcodes Ultimate Plugin?
To fix CVE-2023-23800, update your Shortcodes Ultimate Plugin to a version higher than 5.12.6.
Where can I find more information about CVE-2023-23800?
You can find more information about CVE-2023-23800 at the following link: [https://patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve](https://patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve)