WordPress security by component

CodePen Embedded Pens Shortcode

Plugin description

CodePen Embedded Pens Shortcode is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 28, 2024; the highest CVE/CNA score is 6.5.

Plugin slug: codepen

Latest vulnerability

CVE-2024-50440: CodePen Embedded Pens Shortcode: Cross-site scripting

CodePen Embedded Pens Shortcode is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedOct 28, 2024

Safe version guidanceSee mitigation notes

		Safe version
Oct 28, 2024	CVE-2024-50440 CodePen Embedded Pens Shortcode: Cross-site scripting CodePen Embedded Pens Shortcode is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.5 NVD5.4