A plugin for WordPress called “Request a Quote” has a problem where it can run shortcodes without checking if they are safe first. This means that people who are not logged in can use this to run any code they want.
A plugin for WordPress called “Request a Quote” has a problem where it can run shortcodes without checking if they are safe first. This means that people who are not logged in can use this to run any code they want.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.