Vulnerabilities > Getshortcodes > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-09-20 | CVE-2021-24525 | Cross-site Scripting vulnerability in Getshortcodes Shortcodes Ultimate The Shortcodes Ultimate WordPress plugin before 5.10.2 allows users with Contributor roles to perform stored XSS via shortcode attributes. | 5.4 |
| 2017-07-07 | CVE-2017-2245 | Path Traversal vulnerability in Getshortcodes Shortcodes Ultimate Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspecified vectors. | 5.0 |