WordPress plugin
Shortcode Redirect security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All Shortcode Redirect vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.0.02Update to 1.0.03 | CVE-2025-54746 | |
| Medium5.4 | Cross-Site Scripting ≤1.0.01Update to 1.0.02 | CVE-2012-5325 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.0.02Update to 1.0.03
- Medium5.4Cross-Site Scripting
≤1.0.01Update to 1.0.02
Shortcode Redirect: common questions
Does Shortcode Redirect have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Shortcode Redirect: 2 medium. None are known to affect version null.
How do I check which version of Shortcode Redirect I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Shortcode Redirect vulnerability?
CVE-2025-54746, published Aug 14, 2025: Shortcode Redirect <= 1.0.02 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Shortcode Redirect vulnerability listed in CISA KEV?
No. None of the known Shortcode Redirect vulnerabilities is currently listed in the CISA KEV catalog.