Vulnerabilities / Shortcodes Ultimate
Shortcodes Ultimate vulnerabilities
Advisories WPSec published for Shortcodes Ultimate – Content Elements. Other sources may list more. Its attack surface: Shortcodes Ultimate on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0260 | Shortcodes Ultimate <= 7.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_feed Shortcode Error Message | Medium 6.4 | 7.9.1 |
| 2026-10-02 | WPSEC-2026-0259 | Shortcodes Ultimate <= 7.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode 'type' Attribute | Medium 5.4 | 7.9.1 |
| 2026-10-02 | WPSEC-2026-0258 | Shortcodes Ultimate <= 7.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode | Medium 6.4 | 7.9.1 |
License: CC BY 4.0