Getshortcodes Shortcodes Ultimate vulnerabilities

• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more Shortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attribute CVE-2025-5567 6.4 MediumJuly 4, 2025
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2024-8500 5.4 MediumOctober 23, 2024
• getshortcodes shortcodes ultimate, shortcodes ultimate pro ultimate pro, unknown shortcodes-ultimate-pro +2 more Shortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSS CVE-2024-6766 5.4 MediumAugust 6, 2024
• getshortcodes shortcodes ultimate, unknown shortcodes-ultimate-pro +1 more Shortcodes Ultimate Pro < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSS CVE-2024-4217 4.7 MediumJuly 13, 2024
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode CVE-2024-4821 6.4 MediumJune 5, 2024
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_members Shortcode CVE-2024-4553 6.4 MediumMay 21, 2024
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more Shortcodes Ultimate < 7.1.2 - Contributor+ Stored XSS CVE-2024-3548 6.1 MediumMay 15, 2024
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-3550 6.4 MediumMay 2, 2024
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more Shortcodes Ultimate < 7.1.0 - Contributor+ Stored XSS CVE-2024-3188 6.3 MediumApril 26, 2024
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more Shortcodes Ultimate < 7.0.5 - Contributor+ Stored XSS CVE-2024-2583 5.4 MediumApril 13, 2024
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate, mythemeshop wp shortcode +2 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_qrcode Shortcode CVE-2024-1808 6.4 MediumFebruary 28, 2024
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode CVE-2024-0792 6.4 MediumFebruary 20, 2024
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode CVE-2024-1510 6.4 MediumFebruary 20, 2024
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-6488 5.4 MediumDecember 19, 2023
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosure CVE-2023-6226 4.3 MediumNovember 28, 2023
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-6225 6.4 MediumNovember 28, 2023
• getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF) CVE-2023-23800 7.1 HighNovember 13, 2023
• getshortcodes shortcodes ultimate, unknown wordpress shortcodes plugin — shortcodes ultimate +1 more WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Cross Site Scripting (XSS) CVE-2023-25040 6.5 MediumMarch 30, 2023
• getshortcodes shortcodes ultimate, unknown wordpress shortcodes plugin — shortcodes ultimate +1 more Shortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosure CVE-2023-0911 6.5 MediumMarch 20, 2023
• getshortcodes shortcodes ultimate, unknown wordpress shortcodes plugin — shortcodes ultimate +1 more Shortcodes Ultimate < 5.12.8 - Subscriber+ Arbitrary Post Access CVE-2023-0890 6.5 MediumMarch 20, 2023
• getshortcodes shortcodes ultimate, vladimir anokhin shortcodes ultimate (wordpress plugin) +1 more WordPress Shortcodes Ultimate plugin <= 5.12.0 - CSRF vulnerability leading to Stored XSS CVE-2022-41136 6.1 MediumNovember 8, 2022
• getshortcodes shortcodes ultimate, vladimir anokhin shortcodes ultimate (wordpress plugin) +1 more WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-38086 5.4 MediumOctober 11, 2022
• getshortcodes shortcodes ultimate, unknown wordpress shortcodes plugin — shortcodes ultimate +1 more Shortcodes Ultimate < 5.10.2 - Contributor+ Stored XSS CVE-2021-24525 5.4 MediumSeptember 20, 2021
• getshortcodes shortcodes ultimate The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter... CVE-2017-18580 EPSS 12.1% 9.8 CriticalAugust 22, 2019
• getshortcodes shortcodes ultimate Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote... CVE-2017-2245 5.0 MediumJuly 7, 2017