CVE-2024-12333: WoodMart <= 8.0.3 - Unauthenticated Arbitrary Shortcode Execution
The Woodmart theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.0.3. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode through the woodmartinstagramajaxquery AJAX action. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12333?
CVE-2024-12333 has a medium severity rating as it can allow arbitrary shortcode execution.
How do I fix CVE-2024-12333?
To fix CVE-2024-12333, upgrade the Woodmart theme to the latest version beyond 8.0.3.
Who is affected by CVE-2024-12333?
Any user utilizing the Woodmart theme for WordPress version 8.0.3 or earlier is affected by CVE-2024-12333.
What causes CVE-2024-12333?
CVE-2024-12333 is caused by the Woodmart theme allowing users to execute an action without validating the value.
Can CVE-2024-12333 be exploited remotely?
Yes, CVE-2024-12333 can be exploited remotely by attackers to execute arbitrary shortcodes.