İçeriğe atla
Noroxi

WP Shortcodes Plugin — Shortcodes Ultimate

shortcodes-ultimate · eklenti

WP Shortcodes Plugin — Shortcodes Ultimate için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

27 bilinen açık

1 kritik · 1 kayıt için istismar kodu yayımlanmış · son kayıt 15 Nis 2026

Güvenlik açıkları

  • CVE-2017-18580

    The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode.

    Kritik 9.8

  • CVE-2022-41136

    WordPress Shortcodes Ultimate plugin <= 5.12.0 - CSRF vulnerability leading to Stored XSS

    Yüksek 8.8

  • CVE-2023-25050

    WordPress Shortcodes Ultimate plugin <= 5.12.6 - Arbitrary File Download vulnerability

    Yüksek 7.1

  • CVE-2025-49244

    WordPress Shortcodes Ultimate plugin <= 7.3.5 - Cross Site Scripting (XSS) Vulnerability

    Orta 6.5

  • CVE-2023-23800

    WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF)

    Orta 6.5

  • CVE-2026-3885

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_box Shortcode

    Orta 6.4

  • CVE-2026-0738

    Shortcodes Ultimate <= 7.4.8 - authenticated (Contributor+) Stored Cross-Site Scripting via 'su_carousel' Shortcode

    Orta 6.4

  • CVE-2026-0737

    Shortcodes Ultimate <= 7.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'su_lightbox' Shortcode

    Orta 6.4

  • CVE-2026-2480

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'max_width' Shortcode Attribute

    Orta 6.4

  • CVE-2025-8015

    Shortcodes Ultimate <= 7.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title and Slide Link

    Orta 6.4

  • CVE-2025-7354

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes

    Orta 6.4

  • CVE-2025-7369

    Shortcodes Ultimate <= 7.4.2 - Cross-Site Request Forgery to Arbitrary Shortcode Execution

    Orta 6.1

  • CVE-2025-5567

    Shortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attribute

    Orta 5.4

  • CVE-2025-0370

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via src Parameter

    Orta 5.4

  • CVE-2024-8500

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    Orta 5.4

  • CVE-2024-4821

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode

    Orta 5.4

  • CVE-2024-4553

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_members Shortcode

    Orta 5.4

  • CVE-2024-3550

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    Orta 5.4

  • CVE-2024-0792

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

    Orta 5.4

  • CVE-2024-1808

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_qrcode Shortcode

    Orta 5.4

  • CVE-2024-1510

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode

    Orta 5.4

  • CVE-2023-6488

    WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Orta 5.4

  • CVE-2023-6225

    WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Orta 5.4

  • CVE-2023-25040

    WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Cross Site Scripting (XSS)

    Orta 5.4

  • CVE-2017-2245

    Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspeci

    Orta 5.0

  • CVE-2023-6226

    WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosure

    Orta 4.3

  • CVE-2022-38086

    WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability

    Orta 4.3

← Dizine dön