WordPress plugin
Theme Blvd Shortcodes security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium2
- Low0
All Theme Blvd Shortcodes vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ≤1.6.8No patch available | CVE-2023-5338 | |
| Medium6.5 | Missing Authorization Checks ≤1.2.3Update to 1.2.4 | — |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤1.6.8No patch available
- Medium6.5Missing Authorization Checks
≤1.2.3Update to 1.2.4
Theme Blvd Shortcodes: common questions
Does Theme Blvd Shortcodes have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Theme Blvd Shortcodes: 2 medium. At least one is not fixed in the latest version.
How do I check which version of Theme Blvd Shortcodes I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Theme Blvd Shortcodes vulnerability?
CVE-2023-5338, published Oct 22, 2023: Theme Blvd Shortcodes <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode. Severity: Medium (CVSS 6.4).
Is any Theme Blvd Shortcodes vulnerability listed in CISA KEV?
No. None of the known Theme Blvd Shortcodes vulnerabilities is currently listed in the CISA KEV catalog.