Known Vulnerabilities for CPO Shortcodes by Wpchill
Listed below are 2 of the newest known vulnerabilities associated with "CPO Shortcodes" by "Wpchill".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57798 json | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Saur... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-57737 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta LTD Shortcodes a... | Not Provided | 2026-07-01 | 2026-07-02 |
| CVE-2026-16572 json | The LogMyTrip WordPress plugin through 1.9 does not sanitize and escape a value taken from a cookie before using it in a SQL ... | Not Provided | 2026-08-03 | 2026-08-03 |
| CVE-2026-15256 json | The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-supplied query-string input, used to pre-populate a for... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2026-14864 json | The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortc... | Not Provided | 2026-08-02 | 2026-08-03 |
| CVE-2026-14225 json | The Easy Appointments WordPress plugin before 3.12.28 does not correctly validate shortcode input in one of its block-renderi... | Not Provided | 2026-08-06 | 2026-08-10 |
| CVE-2026-13009 json | The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Paramete... | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-12939 json | The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the post_t... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-11778 json | The The CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x plugin for WordPress is vulnerable to arbitr... | Not Provided | 2026-07-03 | 2026-07-06 |
| CVE-2026-10724 json | The Reviews Feed WordPress plugin before 2.6.5 does not neutralize WordPress shortcodes contained in third-party review cont... | Not Provided | 2026-07-20 | 2026-07-20 |