Insert Pages

Insert Pages is a WordPress plugin that allows users to embed any WordPress content, including custom post types, into other WordPress content using the Shortcode API. This enables users to abstract away common data types into their own custom post types and display them within normal pages and posts. The plugin also includes a widget for inserting pages into any widget area. An advanced tutorial is available for creating custom post types with custom fields and templates. A use case example is given for creating a custom post type for due dates.

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Vulnerabilities

  • Input validation vulnerability in Insert Pages 3.7.4

    Fixed

    The Insert Pages plugin for WordPress has a security flaw in versions up to 3.7.4 that allows attackers with contributor-level permissions or higher to inject malicious code into pages. This code will...

    Read More
  • Input validation vulnerability in Insert Pages 3.6.1

    Fixed

    The Insert Pages WordPress plugin before 3.7.0 allowed users with a role of Contributor or higher to add a special code to their posts called a ""shortcode"". This code would then print out the conten...

    Read More
  • Access violation vulnerability in Insert Pages 3.2.4

    Fixed

    The Insert Pages plugin for WordPress was vulnerable to a type of attack called directory traversal in versions earlier than 3.2.4. This type of attack allowed people with editor-level access to the W...

    Read More
  • Access violation vulnerability in Insert Pages 3.6.1

    Fixed

    The Insert Pages WordPress plugin before 3.7.0 had a security issue that allowed people with a Contributor role or higher to view the content and information from posts and pages

    Read More