shapedplugin

Top products

The 15 most recently published vulnerabilities affecting shapedplugin.

• CVE-2026-18988Easy Accordion <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'accordionTitleTag' Block Attribute6.4Aug 8, 2026
• CVE-2026-15652Easy Accordion <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Block Attribute6.4Jul 16, 2026
• CVE-2026-7249Location Weather <= 3.0.2 - Missing Authorization to Authenticated (Contributor+) Block Settings Modification and Cache Purging4.3May 22, 2026
• CVE-2026-4665WP Carousel Free <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-caption' Attribute6.4May 5, 2026
• CVE-2026-3017Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts <= 3.0.12 - Authenticated (Administrator+) PHP Object Injection7.2Apr 14, 2026
• CVE-2025-12584Quick View for WooCommerce <= 2.2.17 - Unauthenticated Private Product Disclosure5.3Nov 27, 2025
• CVE-2025-48134WordPress WP Tabs plugin <= 2.2.12 - PHP Object Injection Vulnerability7.2May 16, 2025
• CVE-2024-3996Post Grid, Post Carousel, & List Category Posts < 2.4.28 - Editor+ Stored XSS3.5May 15, 2025
• CVE-2024-8187Smart Post Show <= 3.0.0 - Editor+ Stored XSS4.8May 15, 2025
• CVE-2024-11503WP Tabs < 2.2.7 - Admin+ Stored XSS6.1Mar 25, 2025
• CVE-2024-5020Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library6.4Dec 4, 2024
• CVE-2024-32801WordPress Widget Post Slider plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability5.9Apr 24, 2024
• CVE-2024-3020Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Admin+) PHP Object Injection7.2Apr 10, 2024
• CVE-2024-2949Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sp_wp_carousel_shortcode'6.4Apr 6, 2024
• CVE-2024-1363Easy Accordion – Best Accordion FAQ Plugin for WordPress <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4Mar 13, 2024