blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2022-4946

MEDIUM 5.4 CVSS 3.1
Published
June 5, 2023
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-601
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode, which could allow users with a role as low as contributor to add a malicious shortcode to a page/post, which will redirect users to an arbitrary domain.

Affected products and versions

  • Unknown Frontend Post WordPress Plugin — Up to and including 2.8.4
  • accesspressthemes frontend_post_wordpress_plugin — Up to and including 2.8.4

References

  • wpscan.com https://wpscan.com/vulnerability/6e222018-a3e0-4af0-846c-6f00b67dfbc0 Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record