CVE-2024-9578

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-9578
The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to do_shortcode being hooked through the comment_text filter in all versions up to and including 1.4.2. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the target site.
CVSS

No CVSS.

References
Link Resource
https://plugins.trac.wordpress.org/browser/hide-links/trunk/class.hidelinks.php#L21 Product
https://www.wordfence.com/threat-intel/vulnerabilities/id/4198bbb2-3aff-492e-a781-b0c9477baf6c?source=cve Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:avovkdesign:hide_links:*:*:*:*:*:wordpress:*:*
History

09 Jul 2025, 18:38

Type Values Removed Values Added
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/4198bbb2-3aff-492e-a781-b0c9477baf6c?source=cve - () https://www.wordfence.com/threat-intel/vulnerabilities/id/4198bbb2-3aff-492e-a781-b0c9477baf6c?source=cve - Third Party Advisory
References () https://plugins.trac.wordpress.org/browser/hide-links/trunk/class.hidelinks.php#L21 - () https://plugins.trac.wordpress.org/browser/hide-links/trunk/class.hidelinks.php#L21 - Product
CPE cpe:2.3:a:avovkdesign:hide_links:*:*:*:*:*:wordpress:*:*
First Time Avovkdesign hide Links
Avovkdesign
CWE CWE-862

13 Nov 2024, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-13 02:15

Updated : 2025-07-09 18:38

NVD link : CVE-2024-9578

Mitre link : CVE-2024-9578

JSON object : View

Products Affected

avovkdesign

  • hide_links
CWE

No CWE.