Getshortcodes / Shortcodes Ultimate
25 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-5567 | Shortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attribute | MEDIUM | 6.4 | Jul 4, 2025 |
| CVE-2024-8500 | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting | MEDIUM | 5.4 | Oct 23, 2024 |
| CVE-2024-6766 | Shortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSS | MEDIUM | 5.4 | Aug 6, 2024 |
| CVE-2024-4217 | Shortcodes Ultimate Pro < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSS | MEDIUM | 4.7 | Jul 13, 2024 |
| CVE-2024-4821 | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode | MEDIUM | 6.4 | Jun 5, 2024 |
| CVE-2024-4553 | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_members Shortcode | MEDIUM | 6.4 | May 21, 2024 |
| CVE-2024-3548 | Shortcodes Ultimate < 7.1.2 - Contributor+ Stored XSS | MEDIUM | 6.1 | May 15, 2024 |
| CVE-2024-3550 | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | MEDIUM | 6.4 | May 2, 2024 |
| CVE-2024-3188 | Shortcodes Ultimate < 7.1.0 - Contributor+ Stored XSS | MEDIUM | 6.3 | Apr 26, 2024 |
| CVE-2024-2583 | Shortcodes Ultimate < 7.0.5 - Contributor+ Stored XSS | MEDIUM | 5.4 | Apr 13, 2024 |
| CVE-2024-1808 | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_qrcode Shortcode | MEDIUM | 6.4 | Feb 28, 2024 |
| CVE-2024-0792 | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode | MEDIUM | 6.4 | Feb 20, 2024 |
| CVE-2024-1510 | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode | MEDIUM | 6.4 | Feb 20, 2024 |
| CVE-2023-6488 | WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 5.4 | Dec 19, 2023 |
| CVE-2023-6225 | WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 6.4 | Nov 28, 2023 |
| CVE-2023-6226 | WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosure | MEDIUM | 4.3 | Nov 28, 2023 |
| CVE-2023-23800 | WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF) | HIGH | 7.1 | Nov 13, 2023 |
| CVE-2023-25040 | WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Cross Site Scripting (XSS) | MEDIUM | 6.5 | Mar 30, 2023 |
| CVE-2023-0911 | Shortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosure | MEDIUM | 6.5 | Mar 20, 2023 |
| CVE-2023-0890 | Shortcodes Ultimate < 5.12.8 - Subscriber+ Arbitrary Post Access | MEDIUM | 6.5 | Mar 20, 2023 |
| CVE-2022-41136 | WordPress Shortcodes Ultimate plugin <= 5.12.0 - CSRF vulnerability leading to Stored XSS | HIGH | 8.8 | Nov 8, 2022 |
| CVE-2022-38086 | WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability | MEDIUM | 5.4 | Oct 11, 2022 |
| CVE-2021-24525 | Shortcodes Ultimate < 5.10.2 - Contributor+ Stored XSS | MEDIUM | 5.4 | Sep 20, 2021 |
| CVE-2017-18580 | The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode. | CRITICAL | 9.8 | Aug 22, 2019 |
| CVE-2017-2245 | Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspecified vectors. | MEDIUM | 5.0 | Jul 7, 2017 |
Showing 1 to 25 of 25 CVEs