Skip to content
OpenAdvisories

Vendor

aliakro

3 known vulnerabilities.

Products

Snippet Shortcodes 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-16758

    Snippet Shortcodes <= 5.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    The Snippet Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 5.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated …

    aliakro Snippet Shortcodes Web / CMS
  • Medium 4.3
    CVE-2024-12018

    Snippet Shortcodes <= 4.1.6 - Authenticated (Subscriber+) Shortcode Deletion

    The Snippet Shortcodes plugin for WordPress is vulnerable to unauthorized Shortcode Deletion due to missing authorization in all versions up to, and including, 4.1.6. Note that a nonce is used as authentication here, but the value is leaked. This makes it pos…

    aliakro Snippet Shortcodes Web / CMS
  • Medium 4.3
    CVE-2024-4543

    Snippet Shortcodes <= 4.1.4 - Cross-Site Request Forgery

    The Snippet Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.1.4. This is due to missing or incorrect nonce validation when adding or editing shortcodes. This makes it possible for unauthentic…

    aliakro Snippet Shortcodes Web / CMS