Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

gn_themes Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2024-13362`Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published05/01/2026	SeverityMedium
`CVE-2026-3885`WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_box Shortcode	Exploitation statusNot known exploited	FixYes	Affected productShortcodes Ultimate – Content Elements	Published04/16/2026	SeverityMedium
`CVE-2026-0737`Shortcodes Ultimate <= 7.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'su_lightbox' Shortcode	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published04/04/2026	SeverityMedium
`CVE-2026-0738`Shortcodes Ultimate <= 7.4.8 - authenticated (Contributor+) Stored Cross-Site Scripting via 'su_carousel' Shortcode	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published04/04/2026	SeverityMedium
`CVE-2026-2480`WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'max_width' Shortcode Attribute	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published03/31/2026	SeverityMedium
`CVE-2025-12800`WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.5 - Authenticated (Administrator+) Server-Side Request Forgery	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published11/23/2025	SeverityMedium
`CVE-2025-8015`Shortcodes Ultimate <= 7.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title and Slide Link	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published07/22/2025	SeverityMedium
`CVE-2025-7354`WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published07/21/2025	SeverityMedium
`CVE-2025-7369`Shortcodes Ultimate <= 7.4.2 - Cross-Site Request Forgery to Arbitrary Shortcode Execution	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published07/21/2025	SeverityMedium
`CVE-2025-5567`Shortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attribute	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published07/04/2025	SeverityMedium
`CVE-2024-5647`Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library	Exploitation statusNot known exploited	FixYes	Affected productShortcodes Ultimate – Content Elements	Published07/03/2025	SeverityMedium
`CVE-2025-0370`WP Shortcodes Plugin — Shortcodes Ultimate <= 7.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via src Parameter	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published03/04/2025	SeverityMedium
`CVE-2024-8500`WP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published10/23/2024	SeverityMedium
`CVE-2024-4821`WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_lightbox Shortcode	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published06/05/2024	SeverityMedium
`CVE-2024-4553`WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_members Shortcode	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published05/21/2024	SeverityMedium
`CVE-2024-3550`WP Shortcodes Plugin — Shortcodes Ultimate <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published05/02/2024	SeverityMedium
`CVE-2024-1808`WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_qrcode Shortcode	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published02/28/2024	SeverityMedium
`CVE-2024-0792`WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published02/20/2024	SeverityMedium
`CVE-2024-1510`WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_tooltip Shortcode	Exploitation statusNot known exploited	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published02/20/2024	SeverityMedium
`CVE-2023-6488`WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot confirmed	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published12/19/2023	SeverityMedium
`CVE-2023-6225`WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot confirmed	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published11/28/2023	SeverityMedium
`CVE-2023-6226`WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosure	Exploitation statusNot confirmed	FixYes	Affected productWP Shortcodes Plugin — Shortcodes Ultimate	Published11/28/2023	SeverityMedium

22 / 22 Results

All vulnerabilities loaded

Security vulnerabilities from gn_themes

gn_themes

Filters

Run an in-depth assessment with complete web risk management

Popular gn_themes products

WP Shortcodes Plugin — Shortcodes Ultimate

Shortcodes Ultimate – Content Elements