Skip to content
Noroxi

getshortcodes records

25 published records for vendor getshortcodes.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
28%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

25 records
  • CVE-2017-18580
    43Plan

    The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode.

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    getshortcodes · shortcodes ultimateAug 22, 2019

  • CVE-2022-41136
    35Monitor

    WordPress Shortcodes Ultimate plugin <= 5.12.0 - CSRF vulnerability leading to Stored XSS

    HighCVSS 8.8No exploitEPSS 0%

    getshortcodes · shortcodes ultimateNov 8, 2022

  • CVE-2023-0911
    26Monitor

    Shortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosure

    MediumCVSS 6.5No exploitEPSS 1%

    getshortcodes · shortcodes ultimateMar 20, 2023

  • CVE-2023-0890
    26Monitor

    Shortcodes Ultimate < 5.12.8 - Subscriber+ Arbitrary Post Access

    MediumCVSS 6.5No exploitEPSS 1%

    getshortcodes · shortcodes ultimateMar 20, 2023

  • CVE-2023-23800
    26Monitor

    WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF)

    MediumCVSS 6.5No exploitEPSS 0%

    getshortcodes · shortcodes ultimateNov 12, 2023

  • CVE-2024-3188
    25Monitor

    Shortcodes Ultimate < 7.1.0 - Contributor+ Stored XSS

    MediumCVSS 6.3No exploitEPSS 0%

    getshortcodes · shortcodes ultimateApr 26, 2024

  • CVE-2024-3548
    24Monitor

    Shortcodes Ultimate < 7.1.2 - Contributor+ Stored XSS

    MediumCVSS 6.1No exploitEPSS 0%

    getshortcodes · shortcodes ultimateMay 15, 2024

  • CVE-2017-2245
    21Monitor

    Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspeci

    MediumCVSS 5.0No exploitEPSS 3%

    getshortcodes · shortcodes ultimateJul 7, 2017

  • CVE-2021-24525
    21Monitor

    Shortcodes Ultimate < 5.10.2 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 1%

    getshortcodes · shortcodes ultimateSep 20, 2021

  • CVE-2024-3550
    21Monitor

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 1%

    getshortcodes · shortcodes ultimateMay 2, 2024

  • CVE-2023-6225
    21Monitor

    WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    getshortcodes · shortcodes ultimateNov 28, 2023

  • CVE-2024-1510
    21Monitor

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    getshortcodes · shortcodes ultimateFeb 19, 2024

  • CVE-2023-6488
    21Monitor

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    getshortcodes · shortcodes ultimateDec 18, 2023

  • CVE-2024-0792
    21Monitor

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    getshortcodes · shortcodes ultimateFeb 28, 2024

  • CVE-2023-25040
    21Monitor

    WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    getshortcodes · shortcodes ultimateMar 30, 2023

  • CVE-2024-2583
    21Monitor

    Shortcodes Ultimate < 7.0.5 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    getshortcodes · shortcodes ultimateApr 13, 2024

  • CVE-2024-8500
    21Monitor

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    getshortcodes · shortcodes ultimateOct 23, 2024

  • CVE-2024-4821
    21Monitor

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    getshortcodes · shortcodes ultimateJun 5, 2024

  • CVE-2024-1808
    21Monitor

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_qrcode Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    getshortcodes · shortcodes ultimateFeb 28, 2024

  • CVE-2024-6766
    21Monitor

    Shortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    getshortcodes · shortcodes ultimateAug 6, 2024

  • CVE-2024-4553
    21Monitor

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_members Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    getshortcodes · shortcodes ultimateMay 21, 2024

  • CVE-2025-5567
    21Monitor

    Shortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attribute

    MediumCVSS 5.4No exploitEPSS 0%

    getshortcodes · shortcodes ultimateJul 3, 2025

  • CVE-2024-4217
    18Monitor

    Shortcodes Ultimate Pro < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSS

    MediumCVSS 4.7No exploitEPSS 0%

    getshortcodes · shortcodes ultimateJul 13, 2024

  • CVE-2023-6226
    17Monitor

    WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosure

    MediumCVSS 4.3No exploitEPSS 1%

    getshortcodes · shortcodes ultimateNov 28, 2023

  • CVE-2022-38086
    17Monitor

    WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    getshortcodes · shortcodes ultimateOct 11, 2022