High · 7.1 CVE-2023-23800 EUVD-2023-27886GHSA-2fx6-2pm7-cwvm

WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF)

Published Nov 13, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Vova Anokhin Product: WP Shortcodes Plugin — Shortcodes Ultimate

Description

Server-Side Request Forgery (SSRF) vulnerability in Vova Anokhin WP Shortcodes Plugin — Shortcodes Ultimate.This issue affects WP Shortcodes Plugin — Shortcodes Ultimate: from n/a through 5.12.6.

Affected products

Vendor	Product	Affected	Fixed
Vova Anokhin	WP Shortcodes Plugin — Shortcodes Ultimate	≤ 5.12.6	—

References

https://patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve vdb-entry