Known Vulnerabilities for Wp Shortcode by Mythemeshop
Listed below are 1 of the newest known vulnerabilities associated with "Wp Shortcode" by "Mythemeshop".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57764 json | Contributor Cross Site Scripting (XSS) in Surbma | Yoast SEO Breadcrumb Shortcode <= 1.2 versions. | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-53742 json | Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embed... | Not Provided | 2026-06-10 | 2026-06-11 |
| CVE-2026-31916 json | Missing Authorization vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Exploiting Incorrectly ... | Not Provided | 2026-03-13 | 2026-04-29 |
| CVE-2026-24988 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Hogg The Events C... | Not Provided | 2026-02-03 | 2026-04-28 |
| CVE-2026-13733 json | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'no_data_msg' Shortcode Attribute ... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-13246 json | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-12923 json | The Youtube Showcase plugin for WordPress is vulnerable to Arbitrary Function Call in versions up to and including 4.0.3. Thi... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-12754 json | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'layou... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-12732 json | The LearnPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class_wrapper_form' shortcode attri... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-12242 json | The AdRotate Banner Manager plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 5.... | Not Provided | 2026-06-24 | 2026-06-24 |