gn_themes vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20247
3. 20257
4. 20265

Newest CVEs

• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2026-3885

  WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_box Shortcode

  gn_themes · Shortcodes Ultimate – Content Elements

  Medium6.4
• CVE-2026-0737

  Shortcodes Ultimate <= 7.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'su_lightbox' Shortcode

  gn_themes · WP Shortcodes Plugin — Shortcodes Ultimate

  Medium6.4
• CVE-2026-0738

  Shortcodes Ultimate <= 7.4.8 - authenticated (Contributor+) Stored Cross-Site Scripting via 'su_carousel' Shortcode

  gn_themes · WP Shortcodes Plugin — Shortcodes Ultimate

  Medium6.4
• CVE-2026-2480

  WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'max_width' Shortcode Attribute

  gn_themes · WP Shortcodes Plugin — Shortcodes Ultimate

  Medium6.4
• CVE-2025-12800

  WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.5 - Authenticated (Administrator+) Server-Side Request Forgery

  gn_themes · WP Shortcodes Plugin — Shortcodes Ultimate

  Medium6.4
• CVE-2025-8015

  Shortcodes Ultimate <= 7.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title and Slide Link

  gn_themes · WP Shortcodes Plugin — Shortcodes Ultimate

  Medium6.4
• CVE-2025-7354

  WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes

  gn_themes · WP Shortcodes Plugin — Shortcodes Ultimate

  Medium6.4
• CVE-2025-7369

  Shortcodes Ultimate <= 7.4.2 - Cross-Site Request Forgery to Arbitrary Shortcode Execution

  gn_themes · WP Shortcodes Plugin — Shortcodes Ultimate

  Medium6.1
• CVE-2025-5567

  Shortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attribute

  gn_themes · WP Shortcodes Plugin — Shortcodes Ultimate

  Medium6.4