Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-38086 EUVD-2022-40688GHSA-wcqw-rmpc-36x2

WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability

Published Oct 11, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Vladimir Anokhin Product: Shortcodes Ultimate (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Shortcodes Ultimate plugin <= 5.12.0 at WordPress leading to plugin preset settings change.

Affected products

VendorProductAffectedFixed
Vladimir Anokhin Shortcodes Ultimate (WordPress plugin) <= 5.12.0 – ≤ 5.12.0 —

References