WordPress security by component

JSM file_get_contents() Shortcode

Plugin description

JSM file_get_contents() Shortcode is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 15, 2024; the highest CVE/CNA score is 8.8.

Plugin slug: jsm-file-get-contents-shortcode

Latest vulnerability

CVE-2023-6991: JSM file_get_contents() Shortcode: Server-side request forgery

JSM file_get_contents() Shortcode is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.

PublishedJan 15, 2024

Safe version guidanceSee mitigation notes

		Safe version
Jan 15, 2024	CVE-2023-6991 JSM file_get_contents() Shortcode: Server-side request forgery JSM file_get_contents() Shortcode is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.	See mitigation notes	CVE8.8 NVD8.8