Vendor

    ShapedPlugin

    30 known vulnerabilities in products by ShapedPlugin, 0 of them actively exploited (CISA KEV).

    Key figures

    30

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ShapedPlugin
    HighCVE-2021-24739

    Logo Carousel < 3.4.2 - Unauthorised Private Post Access

    		8.1
    HighCVE-2024-3020

    Deserialization of Untrusted Data (CVE-2024-3020)

    		7.2
    HighCVE-2026-3017

    Deserialization of Untrusted Data (CVE-2026-3017)

    		7.2
    MediumCVE-2026-120685

    Cross-site Scripting (CVE-2026-120685)

    		5.4
    MediumCVE-2026-119160

    Cross-site Scripting (CVE-2026-119160)

    		6.4
    MediumCVE-2026-120683

    Cross-site Scripting (CVE-2026-120683)

    		5.4
    MediumCVE-2026-18988

    Cross-site Scripting (CVE-2026-18988)

    		6.4
    HighCVE-2025-48134

    WordPress WP Tabs plugin <= 2.2.12 - PHP Object Injection Vulnerability

    also in 1 other product

    		7.2
    MediumCVE-2026-120509

    Cross-site Scripting (CVE-2026-120509)

    		4.7
    MediumCVE-2026-15652

    Cross-site Scripting (CVE-2026-15652)

    		6.4
    MediumCVE-2026-4665

    Cross-site Scripting (CVE-2026-4665)

    		6.4
    MediumCVE-2024-5020

    ExtendThemes Colibri Page Builder: Cross-site Scripting

    also in 12 other products

    		6.4
    MediumCVE-2021-24738

    Logo Carousel < 3.4.2 - Contributor+ Stored Cross-Site Scripting

    		5.4
    MediumCVE-2024-1363

    Techearty Easy Accordion: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-0360

    Location Weather < 1.3.4 - Contributor+ Stored XSS

    		5.4
    MediumCVE-2023-0071

    WP Tabs < 2.1.17 - Contributor+ Stored XSS

    		5.4
    MediumCVE-2023-0537

    Product Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSS

    		5.4
    MediumCVE-2024-2949

    ShapedPlugin Wp Carousel: Cross-site Scripting

    		6.4
    MediumCVE-2023-0097

    Post Grid, Post Carousel, & List Category Posts < 2.4.19 - Contributor+ Stored XSS

    		5.4
    MediumCVE-2022-4629

    Product Slider for WooCommerce < 2.6.4 - Contributor+ Stored XSS in Shortcode

    		5.4
    MediumCVE-2022-4648

    Real Testimonials < 2.6.0 - Contributor+ Stored XSS

    		5.4
    MediumCVE-2024-11503

    WP Tabs < 2.2.7 - Admin+ Stored XSS

    		6.1
    MediumCVE-2025-12584

    Quick View for WooCommerce <= 2.2.17 - Unauthenticated Private Product Disclosure

    		5.3
    MediumCVE-2023-52124

    WordPress WP Tabs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		6.5
    MediumCVE-2026-7249

    Missing Authorization (CVE-2026-7249)

    		4.3

    All vulnerabilities in search

    Products

    Products by ShapedPlugin
    ShapedPlugin WP Tabs50
    Carousel, Slider, Photo Gallery With Lightbox, Video Slider, By Wp Carousel40
    Product Slider for WooCommerce30
    Real Testimonials – Testimonial Slider, Collect Customer Reviews And Video Testimonials30
    Smart Post Show30