WordPress Shortcodes Blocks Creator Ultimate plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-54264
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 13 December 2024
What is CVE-2024-54264?
A vulnerability exists in the Shortcodes Blocks Creator Ultimate plugin developed by César Morillas, allowing for improper neutralization of input during web page generation. This results in a Reflected Cross-site Scripting (XSS) vulnerability, where an attacker can inject malicious scripts into web pages viewed by victims. Affected versions range from earlier releases up to 2.2.0, making it imperative for users to assess their installations and apply necessary security measures to mitigate potential attacks. Regular updates and security practices can help protect against this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Shortcodes Blocks Creator Ultimate <= 2.2.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved