WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shortcodes-ultimate
Published
2024-02-27
Title
WP Shortcodes Plugin < 7.0.4 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2024-03-23
Title
Shortcodes Ultimate < 7.0.5 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2024-04-05
Title
Shortcodes Ultimate < 7.1.0 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2024-03-23
Title
Shortcodes Ultimate < 7.0.5 - Contributor+ Stored Cross-Site Scripting via 'note_color' Shortcode
Slug
shortcodes-ultimate
Published
2024-04-24
Title
Shortcodes Ultimate < 7.1.2 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2024-04-29
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.1.3 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2024-04-24
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox
Slug
shortcodes-ultimate
Published
2024-05-20
Title
WP Shortcodes Plugin < 7.1.6 - Contributor+ Stored XSS via su_members Shortcode
Slug
shortcodes-ultimate
Published
2024-06-04
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode
Slug
shortcodes-ultimate
Published
2024-10-22
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.3.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
shortcodes-ultimate
Published
2025-03-03
Title
Shortcodes Ultimate < 7.3.4 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2025-06-05
Title
Shortcodes Ultimate < 7.4.0 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2025-07-02
Title
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2025-07-03
Title
Shortcodes Ultimate < 7.4.1 - Contributor+ Stored XSS via 'data-url' Attribute
Slug
shortcodes-ultimate
Published
2025-07-21
Title
Shortcodes Ultimate < 7.4.3 - Author+ Stored XSS via Image Title and Slide Link
Slug
shortcodes-ultimate
Published
2025-07-20
Title
Shortcodes Ultimate < 7.4.3 - Arbitrary Shortcode Execution via CSRF
Slug
shortcodes-ultimate
Published
2025-07-20
Title
Shortcodes Ultimate < 7.4.3 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2025-11-23
Title
Shortcodes Ultimate < 7.4.6 - Admin+ SSRF
Slug
shortcodes-ultimate
Published
2026-03-31
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'max_width' Shortcode Attribute
Slug
shortcodes-ultimate
Published
2026-04-03
Title
Shortcodes Ultimate < 7.4.9 - authenticated (Contributor+) Stored Cross-Site Scripting via 'su_carousel' Shortcode
Slug
shortcodes-ultimate
Published
2026-04-03
Title
Shortcodes Ultimate < 7.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'su_lightbox' Shortcode
Slug
shortcodes-ultimate
Published
2026-04-15
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_box Shortcode
Slug
shortcodes-ultimate
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
shortcodes-ultimate-pro
Published
2024-06-22
Title
Shortcodes Ultimate Pro < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSS
Slug
shortcodes-ultimate-pro
Published
2024-07-16
Title
Shortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSS