PT-2022-22178 · WordPress · Shortcode Addons

M0Ze + 2 · CVE-2022-34487 · Published 2022-07-21 · Updated 2025-12-01

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions biplob018's Shortcode Addons plugin versions 3.0.2 and earlier

Description The issue is related to an Unauthenticated Arbitrary Option Update vulnerability. This allows for unauthorized modifications to options.

Recommendations For versions 3.0.2 and earlier, update to a version later than 3.0.2 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2022-34487

Affected Products

Shortcode Addons

References · 6

• https://osv.dev/vulnerability/CVE-2022-34487 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34487 · Security Note
• https://t.me/cibsecurity/46770 · Telegram Post
• https://twitter.com/pdnuclei_bot/status/1995493116711985346 · Twitter Post
• https://patchstack.com/database/vulnerability/shortcode-addons/wordpress-shortcode-addons-plugin-3-0-3-unauthenticated-arbitrary-option-update-vulnerability · Note
• https://wordpress.org/plugins/shortcode-addons/#developers · Note