Description
WordPress processes shortcodes in user-generated content on block themes. This could allow an attacker to execute shortcodes via submitting comments or other content, allowing them to exploit vulnerabilities that typically require higher permissions. WordPress versions 6.1.x ranging from 6.1 and up to (and including) 6.1.2 are vulnerable.
Remediation
Update to WordPress version 6.1.3 or latest
References
Related Vulnerabilities
Drupal Core 9.0.x Information Disclosure (9.0.0 - 9.0.5)
Slideshow Gallery LITE Cross-Site Scripting (1.6.4)
WooCommerce Payments-Fully Integrated Solution Built and Supported by Woo Security Bypass (5.6.1)
Translate WordPress-Google Language Translator Cross-Site Scripting (4.0.9)
WordPress 2.8.2 Multiple Security Bypass Vulnerabilities (2.0 - 2.8.2)