Vulnerabilities > Getshortcodes

DATE CVE VULNERABILITY TITLE RISK
2019-08-22 CVE-2017-18580 Improper Input Validation vulnerability in Getshortcodes Shortcodes Ultimate
The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode.
network
low complexity
getshortcodes CWE-20
7.5
2017-07-07 CVE-2017-2245 Path Traversal vulnerability in Getshortcodes Shortcodes Ultimate
Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspecified vectors.
network
low complexity
getshortcodes CWE-22
4.0