Tychesoftwares Arconix Shortcodes — known CVE vulnerabilities

Every CVE whose affected-product data names Tychesoftwares Arconix Shortcodes, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-23703 — CVSS 6.5 (medium): Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Arconix Shortcodes plugin <= 2.1.7 versions.
• CVE-2024-56242 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes…
• CVE-2024-10226 — CVSS 6.4 (medium): The Arconix Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'box' shortcode in all versions…
• CVE-2024-9703 — CVSS 6.4 (medium): The Arconix Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all…
• CVE-2024-38769 — CVSS 5.3 (medium): Missing Authorization vulnerability in Tyche Softwares Arconix Shortcodes allows Accessing Functionality Not Properly Constrained by…