Description
WordPress Plugin WordPress Shortcodes-Shortcodes Ultimate is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin WordPress Shortcodes-Shortcodes Ultimate version 4.9.9 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 4.10.0 or latest
References
http://jvn.jp/en/jp/JVN63249051/index.html
https://plugins.svn.wordpress.org/shortcodes-ultimate/trunk/readme.txt
Related Vulnerabilities
WordPress 2.1.2 Multiple Vulnerabilities (2.1 - 2.1.2)
phpMyFAQ Uncaught Exception Vulnerability (CVE-2023-0790)
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.24)
WordPress Plugin AW WordPress Yearly Category Archives Unspecified Vulnerability (1.2.1)
Jenkins Missing Authorization Vulnerability (CVE-2021-21694)