Veille CVE

Recherche « Unknown Magee Shortcodes »

2 CVE

Critique 0 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Magee Shortcodes » ✕
  1. CVE-2026-105322 5.3 Moyenne

    Unknown Magee Shortcodes

    The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated contact-form actions, allowing unauthenticated users to send arbitrary emails to any address through the site (mail relay).

  2. CVE-2026-105316 7.1 Élevée

    Unknown Magee Shortcodes

    The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions, which are available to unauthenticated users, before reflecting it back in the response, leading to Reflected Cross-Site Scripting.