shapedplugin
- Total products in the ecosystem
- 10
- Total vulnerabilities (90 days)
- 4
en
A short verification protects source data and prevents automated AI requests.
Verifying...
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 11/08/2026, shapedplugin recorded 4 security vulnerabilities in the last 90 days across 2 products, including 0 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials had the most security vulnerabilities in the shapedplugin ecosystem, with 3 vulnerabilities—approximately 75% of the provider's total vulnerabilities during this period.
CVE-2026-120685Real Testimonials <= 4.1.0 - Unauthenticated Stored Cross-Site Scripting via JPEG IPTC Caption + '[gallery]' Shortcode ChainCVE-2026-120683Real Testimonials <= 4.1.0 - Unauthenticated Stored Cross-Site Scripting via Testimonial Submission Form 'tpro_client_testimonial' ParameterCVE-2026-120509Real Testimonials <= 4.1.0 - Unauthenticated Stored Cross-Site Scripting via 'tpro_client_name' ParameterCVE-2026-119160Smart Post <= 4.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User display_name via Author Filter blockCVE-2026-18988Easy Accordion <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'accordionTitleTag' Block Attribute16 Results | Page 1 of 1
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| Published04/10/2024 |
| SeverityHigh |
| Published04/06/2024 |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |