Vulnerability index

Browse CVEs

22 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Shortcodes Ultimate MEDIUM 5.4
CVE-2025-5567

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-url' DOM element attri…

Fix: 7.4.1+
Fix from $1,600 2025-07-04
Shortcodes Ultimate MEDIUM 5.4
CVE-2024-8500

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the several parameters in all ve…

Fix: 7.3.0+
Fix from $1,600 2024-10-23
Shortcodes Ultimate MEDIUM 5.4
CVE-2024-6766

The shortcodes-ultimate-pro WordPress plugin before 7.2.1 does not validate and escape some of its shortcode attributes before outputting them back i…

Fix: 7.2.1+
Fix from $1,600 2024-08-06
Shortcodes Ultimate MEDIUM 5.4
CVE-2024-4821

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's su_lightbox shortco…

Fix: 7.1.7+
Fix from $1,600 2024-06-05
Shortcodes Ultimate MEDIUM 5.4
CVE-2024-4553

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_members' shortc…

Fix: 7.1.6+
Fix from $1,600 2024-05-21
Shortcodes Ultimate MEDIUM 6.1
CVE-2024-3548

The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.1.2 does not sanitise and escape a parameter before outputting it back in th…

Fix: 7.1.2+
Fix from $1,600 2024-05-15
Shortcodes Ultimate MEDIUM 5.4
CVE-2024-3550

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all…

Fix: 7.1.3+
Fix from $1,600 2024-05-02
Shortcodes Ultimate MEDIUM 6.3
CVE-2024-3188

The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.1.0 does not validate and escape some of its shortcode attributes before out…

Fix: 7.1.0+
Fix from $1,600 2024-04-26
Shortcodes Ultimate MEDIUM 5.4
CVE-2024-2583

The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.0.5 does not properly escape some of its shortcodes attributes before they a…

Fix: 7.0.5+
Fix from $1,600 2024-04-13
Shortcodes Ultimate MEDIUM 5.4
CVE-2024-0792

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all…

Fix: 7.0.2+
Fix from $1,600 2024-02-29
Shortcodes Ultimate MEDIUM 5.4
CVE-2024-1808

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_qrcode' shortco…

Fix: 7.0.4+
Fix from $1,600 2024-02-28
Shortcodes Ultimate MEDIUM 5.4
CVE-2024-1510

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's su_tooltip shortcod…

Fix: 7.0.3+
Fix from $1,600 2024-02-20
Shortcodes Ultimate MEDIUM 5.4
CVE-2023-6488

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_button', 'su_me…

Fix: after 7.0.0
Fix from $1,600 2023-12-19
Shortcodes Ultimate MEDIUM 5.4
CVE-2023-6225

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's su_meta shortcode c…

Fix: 7.0.0+
Fix from $1,600 2023-11-28
Shortcodes Ultimate MEDIUM 6.5
CVE-2023-23800

Server-Side Request Forgery (SSRF) vulnerability in Vova Anokhin WP Shortcodes Plugin — Shortcodes Ultimate.This issue affects WP Shortcodes Plugin —…

Fix: after 5.12.6
Fix from $1,600 2023-11-13
Shortcodes Ultimate MEDIUM 5.4
CVE-2023-25040

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vova Anokhin WordPress Shortcodes Plugin — Shortcodes Ultimate plugin <= 5.12…

Fix: 5.12.7+
Fix from $1,600 2023-03-30
Shortcodes Ultimate MEDIUM 6.5
CVE-2023-0890

The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not ensure that posts to be displayed via some shortcodes a…

Fix: 5.12.8+
Fix from $1,600 2023-03-20
Shortcodes Ultimate MEDIUM 6.5
CVE-2023-0911

The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not validate the user meta to be retrieved via the user sho…

Fix: 5.12.8+
Fix from $1,600 2023-03-20
Shortcodes Ultimate HIGH 8.8
CVE-2022-41136

Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Vladimir Anokhin's Shortcodes Ultimate plugin <= 5.12…

Fix: after 5.12.0
Fix from $1,950 2022-11-08
Shortcodes Ultimate MEDIUM 5.4
CVE-2021-24525

The Shortcodes Ultimate WordPress plugin before 5.10.2 allows users with Contributor roles to perform stored XSS via shortcode attributes. Note: the …

Fix: 5.10.2+
Fix from $1,600 2021-09-20
Shortcodes Ultimate CRITICAL 9.8
CVE-2017-18580EPSS 12%

The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode.

Fix: 5.0.1+
Fix from $2,300 2019-08-22
Shortcodes Ultimate MEDIUM 5.0
CVE-2017-2245

Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspecified vect…

Fix: after 4.9.9
Fix from $1,600 2017-07-07