Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how getshortcodes compares to other vendors in security performance

View Risk Score →

WP Shortcodes UltimateShortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attribute

Risk 28
Severity
6.4
EPSS
0.03%
First published (updated )
CVE-2025-5567

Getshortcodes Shortcodes Ultimate WordpressWP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

Risk 25
Severity
5.4
EPSS
0.05%
First published (updated )
CVE-2024-8500

Getshortcodes Shortcodes Ultimate WordpressShortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSS

Risk 25
Severity
5.4
EPSS
0.04%
First published (updated )
CVE-2024-6766

Getshortcodes Shortcodes Ultimate WordpressShortcodes Ultimate Pro < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSS

Risk 24
Severity
4.7
First published (updated )
CVE-2024-4217

Getshortcodes Shortcodes Ultimate WordpressWP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode

Risk 28
Severity
6.4
EPSS
0.05%
First published (updated )
CVE-2024-4821
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Getshortcodes Shortcodes Ultimate WordpressWP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_members Shortcode

Risk 28
Severity
6.4
EPSS
0.04%
First published (updated )
CVE-2024-4553

Shortcodes Ultimate WP Shortcodes PluginShortcodes Ultimate < 7.1.2 - Contributor+ Stored XSS

Risk 27
Severity
6.1
EPSS
0.04%
First published (updated )
CVE-2024-3548

Getshortcodes Shortcodes Ultimate WordpressWP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 28
Severity
6.4
EPSS
0.07%
First published (updated )
CVE-2024-3550

Getshortcodes Shortcodes Ultimate WordpressShortcodes Ultimate < 7.1.0 - Contributor+ Stored XSS

Risk 32
Severity
6.3
EPSS
0.04%
First published (updated )
CVE-2024-3188

Getshortcodes Shortcodes Ultimate WordpressShortcodes Ultimate < 7.0.5 - Contributor+ Stored XSS

Risk 34
Severity
5.4
First published (updated )
CVE-2024-2583
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Getshortcodes Shortcodes Ultimate WordpressWP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_qrcode Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1808

Getshortcodes Shortcodes Ultimate WordpressWP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-0792

WordPress Shortcodes UltimateWP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1510

Getshortcodes Shortcodes Ultimate WordpressWP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 25
Severity
5.4
EPSS
0.05%
First published (updated )
CVE-2023-6488

Getshortcodes Shortcodes Ultimate WordpressWP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 28
Severity
6.4
EPSS
0.05%
First published (updated )
CVE-2023-6225
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Getshortcodes Shortcodes Ultimate WordpressWP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosure

Risk 16
Severity
4.3
EPSS
0.05%
First published (updated )
CVE-2023-6226

Getshortcodes Shortcodes Ultimate WordpressWordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF)

Risk 48
Severity
7.1
First published (updated )
CVE-2023-23800

Getshortcodes Shortcodes Ultimate WordpressWordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Cross Site Scripting (XSS)

Risk 46
Severity
6.5
First published (updated )
CVE-2023-25040

Getshortcodes Shortcodes Ultimate WordpressShortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosure

Risk 38
Severity
6.5
First published (updated )
CVE-2023-0911

Getshortcodes Shortcodes Ultimate WordpressShortcodes Ultimate < 5.12.8 - Subscriber+ Arbitrary Post Access

Risk 38
Severity
6.5
First published (updated )
CVE-2023-0890
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Getshortcodes Shortcodes Ultimate WordpressWordPress Shortcodes Ultimate plugin <= 5.12.0 - CSRF vulnerability leading to Stored XSS

Risk 77
Severity
8.8
First published (updated )
CVE-2022-41136

Getshortcodes Shortcodes Ultimate WordpressWordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability

Risk 34
Severity
5.4
First published (updated )
CVE-2022-38086

Getshortcodes Shortcodes Ultimate WordpressShortcodes Ultimate < 5.10.2 - Contributor+ Stored XSS

Risk 34
Severity
5.4
First published (updated )
CVE-2021-24525

Getshortcodes Shortcodes Ultimate WordpressInput Validation

Risk 86
Severity
9.8
First published (updated )
CVE-2017-18580

Getshortcodes Shortcodes Ultimate WordpressPath Traversal

Risk 26
Severity
5
First published (updated )
CVE-2017-2245
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203