CVE-2023-23800: WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF)
First published: Mon Nov 13 2023(Updated: )
Server-Side Request Forgery (SSRF) vulnerability in Vova Anokhin WP Shortcodes Plugin — Shortcodes Ultimate.This issue affects WP Shortcodes Plugin — Shortcodes Ultimate: from n/a through 5.12.6.
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Shortcodes Ultimate by Vova Anokhin | <=5.12.6 |
Remedy
Update to 5.12.7 or a higher version.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-23800?
CVE-2023-23800 is a Server Side Request Forgery (SSRF) vulnerability in the WordPress Shortcodes Ultimate Plugin version 5.12.6 and below.
How does CVE-2023-23800 affect the Shortcodes Ultimate Plugin?
CVE-2023-23800 allows attackers to make requests to internal resources on behalf of the server, potentially leading to unauthorized access to sensitive information and resources.
What is the severity of CVE-2023-23800?
CVE-2023-23800 has a severity score of 7.1 (high).
How can I fix CVE-2023-23800 in the Shortcodes Ultimate Plugin?
To fix CVE-2023-23800, update your Shortcodes Ultimate Plugin to a version higher than 5.12.6.
Where can I find more information about CVE-2023-23800?
You can find more information about CVE-2023-23800 at the following link: [https://patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve](https://patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve)
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/references
- agent/weakness
- agent/title
- agent/severity
- agent/remedy
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- vendor/getshortcodes
- canonical/shortcodes ultimate by vova anokhin
- version/shortcodes ultimate by vova anokhin/5.12.6