Skip to content

Gn Themes vulnerabilities

Products

Newest

100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVE-2024-13362 6.1 MediumMay 1, 2026
gn themes shortcodes ultimate – content elements WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_box Shortcode CVE-2026-3885 6.4 MediumApril 16, 2026
gn themes wp shortcodes plugin — shortcodes ultimate Shortcodes Ultimate <= 7.4.8 - authenticated (Contributor+) Stored Cross-Site Scripting via 'su_carousel' Shortcode CVE-2026-0738 6.4 MediumApril 4, 2026
gn themes wp shortcodes plugin — shortcodes ultimate Shortcodes Ultimate <= 7.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'su_lightbox' Shortcode CVE-2026-0737 6.4 MediumApril 4, 2026
gn themes wp shortcodes plugin — shortcodes ultimate WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'max_width' Shortcode Attribute CVE-2026-2480 6.4 MediumMarch 31, 2026
gn themes wp shortcodes plugin — shortcodes ultimate WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.5 - Authenticated (Administrator+) Server-Side Request Forgery CVE-2025-12800 6.4 MediumNovember 23, 2025
gn themes wp shortcodes plugin — shortcodes ultimate Shortcodes Ultimate <= 7.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title and Slide Link CVE-2025-8015 6.4 MediumJuly 22, 2025
gn themes wp shortcodes plugin — shortcodes ultimate Shortcodes Ultimate <= 7.4.2 - Cross-Site Request Forgery to Arbitrary Shortcode Execution CVE-2025-7369 6.1 MediumJuly 21, 2025
gn themes wp shortcodes plugin — shortcodes ultimate WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes CVE-2025-7354 6.4 MediumJuly 21, 2025
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more Shortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attribute CVE-2025-5567 6.4 MediumJuly 4, 2025
badhonrocks divi torque lite, blossomthemes social feed, boldthemes bold page builder +12 more +14 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library CVE-2024-5647 6.4 MediumJuly 3, 2025
gn themes wp shortcodes plugin — shortcodes ultimate, vanokhin shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via src Parameter CVE-2025-0370 EPSS 36.8% 6.4 MediumMarch 4, 2025
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2024-8500 5.4 MediumOctober 23, 2024
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode CVE-2024-4821 6.4 MediumJune 5, 2024
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_members Shortcode CVE-2024-4553 6.4 MediumMay 21, 2024
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more Shortcodes Ultimate < 7.1.2 - Contributor+ Stored XSS CVE-2024-3548 6.1 MediumMay 15, 2024
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-3550 6.4 MediumMay 2, 2024
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more Shortcodes Ultimate < 7.1.0 - Contributor+ Stored XSS CVE-2024-3188 6.3 MediumApril 26, 2024
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more Shortcodes Ultimate < 7.0.5 - Contributor+ Stored XSS CVE-2024-2583 5.4 MediumApril 13, 2024
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate, mythemeshop wp shortcode +2 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_qrcode Shortcode CVE-2024-1808 6.4 MediumFebruary 28, 2024
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode CVE-2024-0792 6.4 MediumFebruary 20, 2024
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode CVE-2024-1510 6.4 MediumFebruary 20, 2024
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-6488 5.4 MediumDecember 19, 2023
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosure CVE-2023-6226 4.3 MediumNovember 28, 2023
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-6225 6.4 MediumNovember 28, 2023
getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 more WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF) CVE-2023-23800 7.1 HighNovember 13, 2023