WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shortcodes-ultimate
Published
2024-03-23
Title
Shortcodes Ultimate < 7.0.5 - Contributor+ Stored Cross-Site Scripting via 'note_color' Shortcode
Slug
shortcodes-ultimate
Published
2024-04-24
Title
Shortcodes Ultimate < 7.1.2 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2024-04-29
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.1.3 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2024-04-24
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox
Slug
shortcodes-ultimate
Published
2024-05-20
Title
WP Shortcodes Plugin < 7.1.6 - Contributor+ Stored XSS via su_members Shortcode
Slug
shortcodes-ultimate
Published
2024-06-04
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode
Slug
shortcodes-ultimate
Published
2024-10-22
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.3.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
shortcodes-ultimate
Published
2025-03-03
Title
Shortcodes Ultimate < 7.3.4 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2025-06-05
Title
Shortcodes Ultimate < 7.4.0 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2025-07-02
Title
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2025-07-03
Title
Shortcodes Ultimate < 7.4.1 - Contributor+ Stored XSS via 'data-url' Attribute
Slug
shortcodes-ultimate
Published
2025-07-21
Title
Shortcodes Ultimate < 7.4.3 - Author+ Stored XSS via Image Title and Slide Link
Slug
shortcodes-ultimate
Published
2025-07-20
Title
Shortcodes Ultimate < 7.4.3 - Arbitrary Shortcode Execution via CSRF
Slug
shortcodes-ultimate
Published
2025-07-20
Title
Shortcodes Ultimate < 7.4.3 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2025-11-23
Title
Shortcodes Ultimate < 7.4.6 - Admin+ SSRF
Slug
shortcodes-ultimate-pro
Published
2024-06-22
Title
Shortcodes Ultimate Pro < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSS
Slug
shortcodes-ultimate-pro
Published
2024-07-16
Title
Shortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSS
Slug
shortcut-macros
Published
2022-06-16
Title
Shortcut Macros <= 1.3 - Subscriber+ Arbitrary Settings Update
Slug
shorten-url
Published
2023-06-28
Title
Short URL < 1.6.5 - Admin+ Stored Cross-Site Scripting
Slug
shorten-url
Published
2023-07-10
Title
Short URL < 1.6.5 - Admin+ Cross Site Scripting
Slug
shorten-url
Published
2023-10-03
Title
Short URL <= 1.6.8 - CSRF
Slug
shorten-url
Published
2023-06-28
Title
Short URL < 1.6.5 - Subscriber+ SQLi
Slug
shorten-url
Published
2023-11-03
Title
Short URL <= 1.6.8 - Missing Authorization via multiple AJAX functions
Slug
shorten-url
Published
2024-04-12
Title
Short URL <= 1.6.8 - Reflected Cross-Site Scripting
Slug
shorten-url
Published
2024-08-16
Title
Short URL <= 1.6.8 - Cross-Site Request Forgery via configuration_page