Shortcodes Ultimate
Vova
Developer
7.4.9
Latest version
400,000
Installations
No date
Last updated
Vulnerability history
1 present
28 patched
5 Mitigation rules
- Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library vulnerability<= 7.4.2Dec 31, 2025
- Authenticated (Administrator+) Server-Side Request Forgery vulnerability<= 7.4.5Dec 31, 2025
- Authenticated (Author+) Stored Cross-Site Scripting via Image Title and Slide Link vulnerability<= 7.4.2Jul 22, 2025
- Cross-Site Request Forgery to Arbitrary Shortcode Execution vulnerability<= 7.4.2Jul 21, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes vulnerability<= 7.4.2Jul 21, 2025
- Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attribute vulnerability<= 7.4.0Jul 3, 2025
- Cross Site Scripting (XSS) Vulnerability<= 7.3.5Jun 5, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via src Parameter vulnerability<= 7.3.3Mar 4, 2025
- Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability<= 7.2.2Oct 23, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode vulnerability<= 7.1.6Jun 5, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via su_members Shortcode vulnerability<= 7.1.5May 21, 2024
- Contributor+ Stored XSS vulnerability< 7.1.2May 15, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability<= 7.1.2Apr 30, 2024
- Contributor+ Stored XSS vulnerability< 7.1.0Apr 26, 2024
- Contributor+ Stored XSS vulnerability< 7.0.5Apr 15, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via su_qrcode Shortcode vulnerability<= 7.0.3Feb 28, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode vulnerability<= 7.0.2Feb 20, 2024
- Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode vulnerability<= 7.0.1Feb 8, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 7.0.0Dec 18, 2023
- Insecure Direct Object Reference to Information Disclosure vulnerability<= 5.13.3Nov 28, 2023
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.13.3Nov 28, 2023
- Reflected Cross Site Scripting (XSS) vulnerability<= 5.13.0Jul 18, 2023
- Subscriber+ User Meta Disclosure vulnerability< 5.12.8Mar 6, 2023
- Server Side Request Forgery (SSRF) vulnerability<= 5.12.6Feb 10, 2023
- Arbitrary File Download vulnerability<= 5.12.6Feb 10, 2023
- Cross Site Scripting (XSS) vulnerability<= 5.12.6Feb 10, 2023
- CSRF vulnerability leading to Stored XSS<= 5.12.0Oct 13, 2022
- Cross-Site Request Forgery (CSRF) vulnerability<= 5.12.0Oct 2, 2022
- Stored Cross-Site Scripting (XSS) vulnerability<= 5.10.1Aug 23, 2021