Vulnerabilities > Improper Control of Generation of Code ('Code Injection')

DATE	CVE	VULNERABILITY TITLE	RISK
2025-01-03	CVE-2024-11733	The The WordPress Popular Posts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.1.0. network low complexity CWE-94	7.3
2024-12-29	CVE-2024-12238	The The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.8.22. network low complexity CWE-94	6.3
2024-12-21	CVE-2024-11977	The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4.10. network low complexity CWE-94	7.3
2024-12-19	CVE-2024-12789	Code Injection vulnerability in Pbootcms A vulnerability was found in PbootCMS up to 3.2.3. network low complexity pbootcms CWE-94 critical	9.8
2024-12-19	CVE-2024-11740	Code Injection vulnerability in Wpdownloadmanager Download Manager The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.03. network low complexity wpdownloadmanager CWE-94	7.3
2024-12-13	CVE-2024-11012	The The Notibar – Notification Bar for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via njt_nofi_text AJAX action in all versions up to, and including, 2.1.4. network low complexity CWE-94	6.3
2024-12-13	CVE-2024-12417	The The Simple Link Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.4.0. network low complexity CWE-94	6.5
2024-12-13	CVE-2024-12420	The The WPMobile.App — Android and iOS Mobile Application plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 11.52. network low complexity CWE-94	6.5
2024-12-13	CVE-2024-12421	The The Coupon Affiliates – Affiliate Plugin for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.16.7.1. network low complexity CWE-94	6.5
2024-12-12	CVE-2024-12333	The Woodmart theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.0.3. network low complexity CWE-94	6.5