WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
shortcodes-ultimate
Published
2024-06-04
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode
Slug
shortcodes-ultimate
Published
2024-10-22
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.3.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
shortcodes-ultimate
Published
2025-03-03
Title
Shortcodes Ultimate < 7.3.4 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2025-06-05
Title
Shortcodes Ultimate < 7.4.0 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2025-07-02
Title
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2025-07-03
Title
Shortcodes Ultimate < 7.4.1 - Contributor+ Stored XSS via 'data-url' Attribute
Slug
shortcodes-ultimate
Published
2025-07-21
Title
Shortcodes Ultimate < 7.4.3 - Author+ Stored XSS via Image Title and Slide Link
Slug
shortcodes-ultimate
Published
2025-07-20
Title
Shortcodes Ultimate < 7.4.3 - Arbitrary Shortcode Execution via CSRF
Slug
shortcodes-ultimate
Published
2025-07-20
Title
Shortcodes Ultimate < 7.4.3 - Contributor+ Stored XSS
Slug
shortcodes-ultimate
Published
2025-11-23
Title
Shortcodes Ultimate < 7.4.6 - Admin+ SSRF
Slug
shortcodes-ultimate
Published
2026-03-31
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'max_width' Shortcode Attribute
Slug
shortcodes-ultimate
Published
2026-04-03
Title
Shortcodes Ultimate < 7.4.9 - authenticated (Contributor+) Stored Cross-Site Scripting via 'su_carousel' Shortcode
Slug
shortcodes-ultimate
Published
2026-04-03
Title
Shortcodes Ultimate < 7.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'su_lightbox' Shortcode
Slug
shortcodes-ultimate
Published
2026-04-15
Title
WP Shortcodes Plugin — Shortcodes Ultimate < 7.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_box Shortcode
Slug
shortcodes-ultimate-pro
Published
2024-06-22
Title
Shortcodes Ultimate Pro < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSS
Slug
shortcodes-ultimate-pro
Published
2024-07-16
Title
Shortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSS
Slug
shortcut-macros
Published
2022-06-16
Title
Shortcut Macros <= 1.3 - Subscriber+ Arbitrary Settings Update
Slug
shorten-url
Published
2023-06-28
Title
Short URL < 1.6.5 - Admin+ Stored Cross-Site Scripting
Slug
shorten-url
Published
2023-07-10
Title
Short URL < 1.6.5 - Admin+ Cross Site Scripting
Slug
shorten-url
Published
2023-10-03
Title
Short URL <= 1.6.8 - CSRF
Slug
shorten-url
Published
2023-06-28
Title
Short URL < 1.6.5 - Subscriber+ SQLi
Slug
shorten-url
Published
2023-11-03
Title
Short URL <= 1.6.8 - Missing Authorization via multiple AJAX functions
Slug
shorten-url
Published
2024-04-12
Title
Short URL <= 1.6.8 - Reflected Cross-Site Scripting
Slug
shorten-url
Published
2024-08-16
Title
Short URL <= 1.6.8 - Cross-Site Request Forgery via configuration_page
Slug
shorten-url
Published
2025-05-16
Title
Short URL <= 1.6.8 - Subscriber+ SQLi