WordPress security by component

Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes

Plugin description

Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 21, 2024; the highest CVE/CNA score is 6.1.

Plugin slug: security-force

Latest vulnerability

CVE-2024-11365: Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes: Cross-site scripting

Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedNov 21, 2024

Safe version guidanceSee mitigation notes

		Safe version
Nov 21, 2024	CVE-2024-11365 Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes: Cross-site scripting Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVDPending