Vendor

    Shapedplugin Llc

    8 known vulnerabilities in products by Shapedplugin Llc, 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Shapedplugin Llc
    CriticalCVE-2026-49777

    WordPress Product Slider Pro for WooCommerce plugin < 3.5.3 - Backdoor vulnerability

    		10.0
    HighCVE-2026-59521

    WordPress Real Testimonials plugin <= 3.1.15 - PHP Object Injection vulnerability

    		7.2
    HighCVE-2025-48134

    WordPress WP Tabs plugin <= 2.2.12 - PHP Object Injection Vulnerability

    also in 1 other product

    		7.2
    MediumCVE-2026-66433

    WordPress Location Weather plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2025-58228

    WordPress Quick View for WooCommerce Plugin <= 2.2.16 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    MediumCVE-2025-22269

    WordPress Real Testimonials plugin <= 3.1.6 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2023-41132

    WordPress Category Slider for WooCommerce plugin <= 1.4.15 - Broken Access Control vulnerability

    		4.3
    MediumCVE-2023-52124

    WordPress WP Tabs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		6.5