Arbitrary Shortcode Execution Vulnerability in Uix Slideshow Plugin

CVE-2024-9839

What is CVE-2024-9839?

The Uix Slideshow plugin for WordPress is susceptible to arbitrary shortcode execution across all versions up to and including 1.6.5. This vulnerability arises from inadequate validation of inputs when executing shortcodes, allowing unauthenticated attackers to manipulate this functionality. As a consequence, an attacker could execute arbitrary shortcodes, potentially leading to unauthorized actions or exposure of sensitive site data.

References