<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 22 Oct 2026 14:38:36 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-8481 — Special Text Boxes &lt;= 6.2.4 - Unauthenticated Arbitrary Shortcode Execution</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2024-8481</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; minimus Special Text Boxes, minimus special_text_boxes&lt;/p&gt;
&lt;p&gt;The The Special Text Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.2.4. This is due to the plugin adding the filter add_filter(&amp;#39;comment_text&amp;#39;, &amp;#39;do_shortcode&amp;#39;); which will run all shortcodes in comments. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; minimus Special Text Boxes, minimus special_text_boxes&lt;/p&gt;
&lt;p&gt;The The Special Text Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.2.4. This is due to the plugin adding the filter add_filter(&amp;#39;comment_text&amp;#39;, &amp;#39;do_shortcode&amp;#39;); which will run all shortcodes in comments. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2024-8481</guid>
    </item>
  </channel>
</rss>
