Vendor
Vladimir Anokhin
25 known vulnerabilities in products by Vladimir Anokhin, 0 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2017-18580 | WP Shortcodes Plugin — Shortcodes Ultimate: Remote Code Execution | 9.8 | |
| Medium | CVE-2017-2245 | Vladimir Anokhin Shortcodes Ultimate: Path Traversal | 5.0 | |
| Medium | CVE-2023-0911 | Shortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosure | 6.5 | |
| Medium | CVE-2023-0890 | Shortcodes Ultimate < 5.12.8 - Subscriber+ Arbitrary Post Access | 6.5 | |
| Medium | CVE-2024-3550 | Gn Themes WP Shortcodes Plugin: Cross-site Scripting | 6.4 | |
| High | CVE-2023-23800 | WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF) | 7.1 | |
| Medium | CVE-2024-1510 | Gn Themes WP Shortcodes Plugin: Cross-site Scripting | 6.4 | |
| Medium | CVE-2023-6225 | Gn Themes WP Shortcodes Plugin: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-0792 | Gn Themes WP Shortcodes Plugin: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-3188 | Shortcodes Ultimate < 7.1.0 - Contributor+ Stored XSS | 6.3 | |
| Medium | CVE-2024-3548 | Shortcodes Ultimate < 7.1.2 - Contributor+ Stored XSS | 6.1 | |
| Medium | CVE-2021-24525 | Shortcodes Ultimate < 5.10.2 - Contributor+ Stored XSS | 5.4 | |
| Medium | CVE-2023-25040 | WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Cross Site Scripting (XSS) | 6.5 | |
| Medium | CVE-2023-6488 | Gn Themes WP Shortcodes Plugin: Cross-site Scripting | 5.4 | |
| Medium | CVE-2024-4821 | Gn Themes WP Shortcodes Plugin: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-8500 | Gn Themes WP Shortcodes Plugin: Cross-site Scripting | 5.4 | |
| Medium | CVE-2024-1808 | Gn Themes WP Shortcodes Plugin: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-5567 | Gn Themes WP Shortcodes Plugin: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-4553 | Gn Themes WP Shortcodes Plugin: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-4217 | Shortcodes Ultimate Pro < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSS | 4.7 | |
| Medium | CVE-2024-2583 | Shortcodes Ultimate < 7.0.5 - Contributor+ Stored XSS | 5.4 | |
| Medium | CVE-2023-6226 | Gn Themes WP Shortcodes Plugin: Authorization Bypass Through User-Controlled Key | 4.3 | |
| Medium | CVE-2024-6766 | Shortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSS | 5.4 | |
| High | CVE-2022-41136 | WordPress Shortcodes Ultimate plugin <= 5.12.0 - CSRF vulnerability leading to Stored XSS | 6.1 | |
| Medium | CVE-2022-38086 | WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability | 5.4 |
Products
| WP Shortcodes Plugin | 25 | 0 |