Every CVE whose affected-product data names Nicdark Nd Shortcodes, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2023-1273 — CVSS 8.8 (high): The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to…
CVE-2024-5220 — CVSS 6.4 (medium): The ND Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's upload feature in all versions up to…
CVE-2022-4623 — CVSS 5.4 (medium): The ND Shortcodes WordPress plugin before 7.0 does not validate and escape numerous of its shortcode attributes before outputting them back…