WordPress security by component
Info Boxes Shortcode and Widget
Plugin description
Info Boxes Shortcode and Widget adds configurable information boxes through WordPress shortcodes and widgets.
Info Boxes Shortcode and Widget (info-boxes-shortcode-and-widget) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 24, 2025; the highest published CVSS base score is 4.3.
Plugin slug:
info-boxes-shortcode-and-widgetLatest vulnerability
CVE-2025-30541: Info Boxes Shortcode and Widget: Cross-site request forgery
Info Boxes Shortcode and Widget is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
| Safe version |
|
||
|---|---|---|---|
| Mar 24, 2025 |
CVE-2025-30541
Info Boxes Shortcode and Widget: Cross-site request forgery
Info Boxes Shortcode and Widget is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
|