CVE-2023-0274 — The URL Params WordPress plugin before 2.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow user — CVE Database · The Intelligence Room