Making Sure That Valid Values Are Provided For Shortcode Attributes Can Prevent Security Issues As Well Providing a Better Experience

https://www.pluginvulnerabilities.com/2018/01/16/making-sure-that-valid-values-are-provided-for-shortcode-attributes-can-prevent-security-issues-as-well-providing-a-better-experience/

One of the areas of WordPress plugins that has received additional attention when it comes to security recently has been shortcodes, as WordPress now allows anyone that is logged in to WordPress to access those. While that change has expanded the pool of people that might exploit an issue related to those, it was already the case that lower level

Source: Security Feed