CVE-2025-13835
- EPSS 0.03%
- Veröffentlicht 01.12.2025 17:57:41
- Zuletzt bearbeitet 02.12.2025 17:16:29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tyche Softwares Arconix Shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through 2.1.19.
CVE-2025-66085
- EPSS 0.03%
- Veröffentlicht 21.11.2025 12:29:58
- Zuletzt bearbeitet 21.11.2025 22:16:35
Missing Authorization vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arconix Shortcodes: from n/a through <= 2.1.18.
CVE-2025-49858
- EPSS 0.03%
- Veröffentlicht 17.06.2025 15:01:20
- Zuletzt bearbeitet 17.06.2025 20:50:23
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes allows Stored XSS. This issue affects Arconix Shortcodes: from n/a through 2.1.17.
CVE-2025-47673
- EPSS 0.03%
- Veröffentlicht 23.05.2025 12:43:20
- Zuletzt bearbeitet 23.05.2025 15:54:42
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes allows Reflected XSS. This issue affects Arconix Shortcodes: from n/a through 2.1.16.
CVE-2025-24621
- EPSS 0.03%
- Veröffentlicht 17.04.2025 15:48:17
- Zuletzt bearbeitet 17.04.2025 20:21:48
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes allows Reflected XSS. This issue affects Arconix Shortcodes: from n/a through 2.1.15.
CVE-2024-56242
- EPSS 0.06%
- Veröffentlicht 02.01.2025 12:15:25
- Zuletzt bearbeitet 19.03.2025 19:52:59
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tyche Softwares Arconix Shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through 2.1.14.
CVE-2024-38769
- EPSS 0.17%
- Veröffentlicht 01.11.2024 15:15:34
- Zuletzt bearbeitet 20.03.2025 20:47:44
Missing Authorization vulnerability in Tyche Softwares Arconix Shortcodes allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix Shortcodes: from n/a through 2.1.11.
CVE-2024-10226
- EPSS 0.28%
- Veröffentlicht 29.10.2024 14:15:06
- Zuletzt bearbeitet 31.10.2024 16:48:41
The Arconix Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'box' shortcode in all versions up to, and including, 2.1.13 due to insufficient input sanitization and output escaping on user supplied attribu...
CVE-2024-9703
- EPSS 0.22%
- Veröffentlicht 18.10.2024 07:15:02
- Zuletzt bearbeitet 22.10.2024 15:25:27
The Arconix Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 2.1.12 due to insufficient input sanitization and output escaping on user supplied attr...
CVE-2024-4233
- EPSS 0.15%
- Veröffentlicht 08.05.2024 14:15:08
- Zuletzt bearbeitet 21.11.2024 09:42:26
Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce, Tyche Softwares Arconix Shortcodes, Tyche Softwares Arconix FAQ.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through...