Skip to content

Shapedplugin vulnerabilities

Products

Newest

shapedplugin smart post – post grid, post carousel, post slider gutenberg blocks for blog & news Smart Post <= 4.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User display_name via Author Filter block CVE-2026-119160 6.4 MediumOctober 31, 2026
shapedplugin easy accordion – ai-powered faq & accordion blocks, product faq Easy Accordion <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'accordionTitleTag' Block Attribute CVE-2026-18988 6.4 MediumAugust 8, 2026
shapedplugin easy accordion – ai-powered faq & accordion blocks, product faq Easy Accordion <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Block Attribute CVE-2026-15652 6.4 MediumJuly 16, 2026
shapedplugin location weather – wordpress weather forecast, aqi, temperature and weather widget Location Weather <= 3.0.2 - Missing Authorization to Authenticated (Contributor+) Block Settings Modification and Cache Purging CVE-2026-7249 4.3 MediumMay 22, 2026
shapedplugin carousel, slider, photo gallery with lightbox, video slider, by wp carousel WP Carousel Free <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-caption' Attribute CVE-2026-4665 6.4 MediumMay 5, 2026
shapedplugin smart post show – post grid, post carousel & slider, and list category posts Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts <= 3.0.12 - Authenticated (Administrator+) PHP Object Injection CVE-2026-3017 7.2 HighApril 14, 2026
shapedplugin quick view for woocommerce Quick View for WooCommerce <= 2.2.17 - Unauthenticated Private Product Disclosure CVE-2025-12584 5.3 MediumNovember 27, 2025
shapedplugin quick view for woocommerce WordPress Quick View for WooCommerce Plugin <= 2.2.16 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58228 6.5 MediumSeptember 22, 2025
shapedplugin wp tabs WordPress WP Tabs plugin <= 2.2.12 - PHP Object Injection Vulnerability CVE-2025-48134 7.2 HighMay 16, 2025
shapedplugin smart post show Post Grid, Post Carousel, & List Category Posts < 2.4.28 - Editor+ Stored XSS CVE-2024-3996 3.5 LowMay 15, 2025
shapedplugin smart post show Smart Post Show <= 3.0.0 - Editor+ Stored XSS CVE-2024-8187 4.8 MediumMay 15, 2025
shapedplugin wp tabs WP Tabs < 2.2.7 - Admin+ Stored XSS CVE-2024-11503 6.1 MediumMarch 25, 2025
10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library CVE-2024-5020 6.4 MediumDecember 4, 2024
shapedplugin widget post slider WordPress Widget Post Slider plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-32801 5.9 MediumApril 24, 2024
shapedplugin carousel, slider, photo gallery with lightbox, video slider, by wp carousel, logo carousel, post grid\, post carousel\, \& list category posts +1 more +3 more Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Admin+) PHP Object Injec… CVE-2024-3020 7.2 HighApril 10, 2024
shapedplugin wp carousel, carousel, slider, photo gallery with lightbox, video slider, by wp carousel +1 more Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Contributor+) Stored Cro… CVE-2024-2949 6.4 MediumApril 6, 2024
techearty easy accordion, shapedplugin easy accordion – responsive accordion faq builder and product faq +1 more Easy Accordion – Best Accordion FAQ Plugin for WordPress <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1363 6.4 MediumMarch 13, 2024
shapedplugin wp tabs, shapedplugin llc wp tabs – responsive tabs plugin for wordpress +1 more WordPress WP Tabs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-52124 6.5 MediumJanuary 5, 2024
shapedplugin product slider for woocommerce, unknown product slider for woocommerce lite +1 more Product Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSS CVE-2023-0537 5.4 MediumMay 8, 2023
shapedplugin wp tabs – responsive tabs plugin for wordpress, wp tabs +1 more WordPress WP Tabs Plugin <= 2.1.14 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-25065 5.4 MediumFebruary 14, 2023
shapedplugin location weather Location Weather < 1.3.4 - Contributor+ Stored XSS CVE-2023-0360 5.4 MediumFebruary 13, 2023
unknown post grid, post carousel, & list category posts, shapedplugin smart post show +1 more Post Grid, Post Carousel, & List Category Posts < 2.4.19 - Contributor+ Stored XSS CVE-2023-0097 5.4 MediumJanuary 30, 2023
shapedplugin wp tabs WP Tabs < 2.1.17 - Contributor+ Stored XSS CVE-2023-0071 5.4 MediumJanuary 30, 2023
pickplugins product slider for woocommerce Product Slider for WooCommerce < 2.6.4 - Contributor+ Stored XSS in Shortcode CVE-2022-4629 5.4 MediumJanuary 23, 2023
shapedplugin real testimonials Real Testimonials < 2.6.0 - Contributor+ Stored XSS CVE-2022-4648 5.4 MediumJanuary 16, 2023
pickplugins product slider for woocommerce Product Slider for WooCommerce < 2.5.7 - Subscriber+ Arbitrary Options Deletion CVE-2022-2382 4.3 MediumAugust 22, 2022
shapedplugin logo carousel, unknown logo carousel – logo slider, logo showcase, and clients logo gallery +1 more Logo Carousel < 3.4.2 - Unauthorised Private Post Access CVE-2021-24739 8.1 HighDecember 21, 2021
shapedplugin logo carousel, unknown logo carousel – logo slider, logo showcase, and clients logo gallery +1 more Logo Carousel < 3.4.2 - Contributor+ Stored Cross-Site Scripting CVE-2021-24738 5.4 MediumDecember 21, 2021
techearty easy accordion, shapedplugin easy accordion – best accordion faq plugin for wordpress +1 more Easy Accordion < 2.0.22 - Authenticated Stored XSS CVE-2021-24576 5.4 MediumOctober 11, 2021