WordPress plugin
Special Text Boxes security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium2
- Low0
All Special Text Boxes vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.3 | Unauthenticated Arbitrary Shortcode Execution ≤6.2.4Update to 6.2.5 | CVE-2024-8481 | |
| Medium6.1 | Cross-Site Scripting ≤5.9.110Update to 6.0.0 | — | |
| Medium5.5 | Authenticated (Admin+) Stored Cross-Site Scripting ≤5.9.109Update to 5.9.110 | CVE-2021-24485 |
- High7.3Unauthenticated Arbitrary Shortcode Execution
≤6.2.4Update to 6.2.5
- Medium6.1Cross-Site Scripting
≤5.9.110Update to 6.0.0
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
≤5.9.109Update to 5.9.110
Special Text Boxes: common questions
Does Special Text Boxes have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Special Text Boxes: 1 high, 2 medium. None are known to affect version null.
How do I check which version of Special Text Boxes I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Special Text Boxes vulnerability?
CVE-2024-8481, published Sep 24, 2024: Special Text Boxes <= 6.2.4 - Unauthenticated Arbitrary Shortcode Execution. Severity: High (CVSS 7.3).
Is any Special Text Boxes vulnerability listed in CISA KEV?
No. None of the known Special Text Boxes vulnerabilities is currently listed in the CISA KEV catalog.