| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-12018 | Snippet Shortcodes <= 4.1.6 - Authenticated (Subscriber+) Shortcode Deletion | aliakro | Snippet Shortcodes | Medium | 4.3 | 2024-12-12 05:24:21 | Deep Dive |
| CVE-2023-23725 | WordPress Shortcodes by Angie Makes plugin <= 3.46 - Broken Access Control vulnerability | Chris Baldelomar | Shortcodes | Medium | 4.3 | 2024-12-09 11:31:53 | Deep Dive |
| CVE-2024-12167 | Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via _wpnonce | cmorillas1 | Shortcodes Blocks Creator Ultimate | Medium | 6.1 | 2024-12-07 01:45:52 | Deep Dive |
| CVE-2024-12166 | Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via 'page' | cmorillas1 | Shortcodes Blocks Creator Ultimate | Medium | 6.1 | 2024-12-07 01:45:50 | Deep Dive |
| CVE-2024-54209 | WordPress Awesome Shortcodes plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability | WPFactory | Awesome Shortcodes | High | 7.1 | 2024-12-06 13:07:28 | Deep Dive |
| CVE-2024-11732 | BP Profile Shortcodes Extra <= 2.6.0 - Authenticated (Contributor+) SQL Injection via tab Parameter | venutius | BP Profile Shortcodes Extra | Medium | 6.5 | 2024-12-03 07:35:01 | Deep Dive |
| CVE-2024-52464 | WordPress amr shortcodes plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability | anmari | amr shortcodes | High | 7.1 | 2024-12-02 13:49:03 | Deep Dive |
| CVE-2024-11199 | Rescue Shortcodes <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rescue_progressbar Shortcode | rescuethemes | Rescue Shortcodes | Medium | 6.4 | 2024-11-23 09:39:10 | Deep Dive |
| CVE-2024-11227 | Memberlite Shortcodes <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via memberlite_accordion Shortcode | strangerstudios | Memberlite Shortcodes | Medium | 6.4 | 2024-11-23 09:39:09 | Deep Dive |
| CVE-2024-11365 | Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes <= 1.1.6 - Reflected Cross-Site Scripting | securityforce | Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes | Medium | 6.1 | 2024-11-21 02:06:48 | Deep Dive |
| CVE-2024-51638 | WordPress Awesome Shortcodes For Genesis plugin 1.1.8 - Cross Site Scripting (XSS) vulnerability | Sanjeev Mohindra | Awesome Shortcodes For Genesis | High | 7.1 | 2024-11-19 16:32:28 | Deep Dive |
| CVE-2024-51857 | WordPress Olympus Shortcodes plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability | DannyCooper | Olympus Shortcodes | Medium | 6.5 | 2024-11-19 16:31:31 | Deep Dive |
| CVE-2024-51878 | WordPress AchillesTheme-shortcodes plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability | strailejoey | AchillesTheme-shortcodes | Medium | 6.5 | 2024-11-19 16:31:20 | Deep Dive |
| CVE-2024-51881 | WordPress Be Shortcodes plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability | Beautimour | Be Shortcodes | Medium | 6.5 | 2024-11-19 16:31:18 | Deep Dive |
| CVE-2024-10340 | Shortcodes Blocks Creator Ultimate <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | cmorillas1 | Shortcodes Blocks Creator Ultimate | Medium | 6.4 | 2024-11-05 02:04:04 | Deep Dive |
| CVE-2024-38769 | WordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerability | Tyche Softwares | Arconix Shortcodes | Medium | 5.3 | 2024-11-01 14:17:59 | Deep Dive |
| CVE-2024-9846 | Enable Shortcodes inside Widgets,Comments and Experts <= 1.0.0 - Unauthenticated Arbitrary Shortcode Execution | amu02aftab | Enable Shortcodes inside Widgets,Comments and Experts | High | 7.3 | 2024-10-30 02:04:38 | Deep Dive |
| CVE-2024-10226 | Arconix Shortcodes <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode | tychesoftwares | Arconix Shortcodes | Medium | 6.4 | 2024-10-29 13:53:57 | Deep Dive |
| CVE-2024-9772 | Uix Shortcodes – Compatible with Gutenberg <= 1.9.9 - Unauthenticated Arbitrary Shortcode Execution | uiuxlab | Uix Shortcodes | High | 7.3 | 2024-10-26 09:35:20 | Deep Dive |
| CVE-2024-10341 | League of Legends Shortcodes <= 1.0.1 - Authenticated (Contributor+) SQL Injection via Shortcode | tezzeract | League of Legends Shortcodes | Medium | 6.5 | 2024-10-25 07:37:58 | Deep Dive |