CVE-2022-41136: Getshortcodes Shortcodes Ultimate

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Vladimir Anokhin's Shortcodes Ultimate plugin <= 5.12.0 on WordPress.

Affected products

• Getshortcodes Shortcodes Ultimate: up to and including 5.12.0

Published 2022-11-08. Last modified 2026-06-17.