PatchTheCVEshortcode factory vulnerabilities and fixes
Recent CVEs affecting shortcode factory, with upgrade or downgrade steps. 2 tracked.
Also searched as: shortcodefactory.
shortcode factory has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-08-22. Highest priority: CVE-2019-15322 (score 60/100).
- CVE-2019-15322 CRITICAL 9.8 UPGRADE The shortcode-factory plugin before 2.8 for WordPress has Local File Inclusion.
- CVE-2015-9321 MEDIUM 6.1 UPGRADE The shortcode-factory plugin before 1.1.1 for WordPress has XSS via add_query_arg.
FAQ
How do I fix shortcode factory vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is shortcode factory being exploited right now?
None of the tracked shortcode factory CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which shortcode factory CVE should I patch first?
CVE-2019-15322 currently ranks highest (60/100): The shortcode-factory plugin before 2.8 for WordPress has Local File Inclusion..