Description
WordPress Plugin Smart Scroll Posts for WordPress [only if downloaded via the vendor website] contains suspicious code. Attackers can exploit this issue to perform a variety of actions. Successful attacks will compromise the affected application and possibly the webserver or computer. WordPress Plugin Smart Scroll Posts for WordPress version 2.0.8 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.0.9 or latest
References
Related Vulnerabilities
WordPress Plugin GamePress-The Game Database Cross-Site Scripting (1.1.0)
Django Improper Validation of Specified Quantity in Input Vulnerability (CVE-2023-41164)
WordPress Plugin Gallery-Video Gallery and Youtube Gallery Cross-Site Scripting (1.2.4)
WordPress Plugin Cimy User Extra Fields Denial of Service (2.6.3)