First published: Thu Sep 05 2024(Updated: )
The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to missing authorization and capability checks on the ajax__shortcode_cache function in all versions up to, and including, 8.6.9. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the target site.
Credit: security@wordfence.com
Affected Software | Affected Version | How to fix |
---|---|---|
Infinitumform Geo Controller Wordpress | <=8.6.9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.