Skip to contentGn Themes Wp Shortcodes Plugin — Shortcodes Ultimate vulnerabilities
- 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 moreFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterCVE-2024-133626.1 Medium
- gn themes wp shortcodes plugin — shortcodes ultimateShortcodes Ultimate <= 7.4.8 - authenticated (Contributor+) Stored Cross-Site Scripting via 'su_carousel' ShortcodeCVE-2026-07386.4 Medium
- gn themes wp shortcodes plugin — shortcodes ultimateShortcodes Ultimate <= 7.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'su_lightbox' ShortcodeCVE-2026-07376.4 Medium
- gn themes wp shortcodes plugin — shortcodes ultimateWP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'max_width' Shortcode AttributeCVE-2026-24806.4 Medium
- gn themes wp shortcodes plugin — shortcodes ultimateWP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.5 - Authenticated (Administrator+) Server-Side Request ForgeryCVE-2025-128006.4 Medium
- gn themes wp shortcodes plugin — shortcodes ultimateShortcodes Ultimate <= 7.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title and Slide LinkCVE-2025-80156.4 Medium
- gn themes wp shortcodes plugin — shortcodes ultimateShortcodes Ultimate <= 7.4.2 - Cross-Site Request Forgery to Arbitrary Shortcode ExecutionCVE-2025-73696.1 Medium
- gn themes wp shortcodes plugin — shortcodes ultimateWP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin ShortcodesCVE-2025-73546.4 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreShortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' AttributeCVE-2025-55676.4 Medium
- gn themes wp shortcodes plugin — shortcodes ultimate, vanokhin shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via src ParameterCVE-2025-0370EPSS 36.8%6.4 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2024-85005.4 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox ShortcodeCVE-2024-48216.4 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_members ShortcodeCVE-2024-45536.4 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreShortcodes Ultimate < 7.1.2 - Contributor+ Stored XSSCVE-2024-35486.1 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-35506.4 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreShortcodes Ultimate < 7.1.0 - Contributor+ Stored XSSCVE-2024-31886.3 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreShortcodes Ultimate < 7.0.5 - Contributor+ Stored XSSCVE-2024-25835.4 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate, mythemeshop wp shortcode +2 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_qrcode ShortcodeCVE-2024-18086.4 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcodeCVE-2024-07926.4 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip ShortcodeCVE-2024-15106.4 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2023-64885.4 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information DisclosureCVE-2023-62264.3 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2023-62256.4 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF)CVE-2023-238007.1 High