WPScan
How it works
Pricing
Vulnerabilities
WordPress
Plugins
Themes
Stats
Submit vulnerabilities
For developers
Status
API details
CLI scanner
Contact
Login
Get started
WPScan
How it works
Pricing
Vulnerabilities
WordPress
Plugins
Themes
Stats
Submit vulnerabilities
For developers
Status
API details
CLI scanner
Contact
Login
Get started
WordPress Plugin Vulnerabilities
WordPress Shortcodes Plugin — Shortcodes Ultimate
2022-10-12
Shortcodes Ultimate < 5.12.1 - Stored XSS via CSRF
Fixed in version 5.12.1
2022-10-02
Shortcodes Ultimate < 5.12.1 - Settings Preset Update via CSRF
Fixed in version 5.12.1
2021-08-23
Shortcodes Ultimate < 5.10.2 - Contributor+ Stored XSS
Fixed in version 5.10.2
2017-10-31
Shortcodes Ultimate <= 5.0.0 - Authenticated Contributor Code Execution
Fixed in version 5.0.1
2017-07-06
Shortcodes Ultimate <= 4.9.9 - Authenticated Directory Traversal
Fixed in version 4.10.0
Fixed in version 5.0.1Fixed in version 5.0.1