Login Request a demo
SH
Vendor
Shapedplugin
16 products with CVEs on record
31
CVEs
0
On KEV
0
New 30D
Products
WT
WP Tabs
Shapedplugin
8.8
5 CVEs0 on KEV0 new
CS
Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel
shapedplugin
7.2
4 CVEs0 on KEV0 new
PS
Product Slider For Woocommerce
Shapedplugin
7.2
4 CVEs0 on KEV0 new
LC
Logo Carousel
Shapedplugin
8.1
3 CVEs0 on KEV0 new
SP
Smart Post Show
Shapedplugin
5.4
3 CVEs0 on KEV0 new
EA
Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ
shapedplugin
6.4
2 CVEs0 on KEV0 new
EA
Easy Accordion – Responsive Accordion FAQ Builder and Product FAQ
shapedplugin
5.4
1 CVEs0 on KEV0 new
LW
Location Weather
Shapedplugin
5.4
1 CVEs0 on KEV0 new
LW
Location Weather – WordPress Weather Forecast, AQI, Temperature and Weather Widget
shapedplugin
4.3
1 CVEs0 on KEV0 new
PG
Post Grid, Post Carousel, & List Category Posts
Shapedplugin
7.2
1 CVEs0 on KEV0 new
QV
Quick View for WooCommerce
shapedplugin
5.3
1 CVEs0 on KEV0 new
RT
Real Testimonials
Shapedplugin
5.4
1 CVEs0 on KEV0 new
SP
Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts
shapedplugin
7.2
1 CVEs0 on KEV0 new
WP
Widget Post Slider
ShapedPlugin
5.9
1 CVEs0 on KEV0 new
WC
WP Carousel
Shapedplugin
5.4
1 CVEs0 on KEV0 new
WT
WP Tabs – Responsive Tabs Plugin for WordPress
ShapedPlugin
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-18988
EA
Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ
shapedplugin
6.4
0%
Aug 8Easy Accordion <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'accordionTitleTag' Block Attribute
CVE-2026-15652
EA
Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ
shapedplugin
6.4
0%
Jul 16Easy Accordion <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Block Attribute
CVE-2026-7249
LW
Location Weather – WordPress Weather Forecast, AQI, Temperature and Weather Widget
shapedplugin
4.3
0%
May 22Location Weather <= 3.0.2 - Missing Authorization to Authenticated (Contributor+) Block Settings Modification and Cache Purging
CVE-2026-4665
CS
Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel
shapedplugin
6.4
0%
May 5WP Carousel Free <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-caption' Attribute
CVE-2026-3017
SP
Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts
shapedplugin
7.2
1%
Apr 14Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts <= 3.0.12 - Authenticated (Administrator+) PHP Object Injection
CVE-2025-12584
QV
Quick View for WooCommerce
shapedplugin
5.3
0%
Nov 27Quick View for WooCommerce <= 2.2.17 - Unauthenticated Private Product Disclosure
CVE-2025-48134
WT
WP Tabs
Shapedplugin
7.2
0%
May 16WordPress WP Tabs plugin <= 2.2.12 - PHP Object Injection Vulnerability
CVE-2024-3996
SP
Smart Post Show
Shapedplugin
3.5
0%
May 15Post Grid, Post Carousel, & List Category Posts < 2.4.28 - Editor+ Stored XSS
CVE-2024-8187
SP
Smart Post Show
Shapedplugin
4.8
0%
May 15Smart Post Show <= 3.0.0 - Editor+ Stored XSS
CVE-2024-11503
WT
WP Tabs
Shapedplugin
6.1
0%
Mar 25WP Tabs < 2.2.7 - Admin+ Stored XSS
CVE-2024-5020
CS
Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel
shapedplugin
6.4
0%
Dec 4Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
CVE-2024-32801
WP
Widget Post Slider
ShapedPlugin
5.9
0%
Apr 24WordPress Widget Post Slider plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability
CVE-2024-3020
CS
Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel
shapedplugin
7.2
1%
Apr 10Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Admin+) PHP Object Injection
CVE-2024-2949
CS
Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel
shapedplugin
5.4
0%
Apr 6Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sp_wp_carousel_shortcode'
CVE-2024-1363
EA
Easy Accordion – Responsive Accordion FAQ Builder and Product FAQ
shapedplugin
5.4
0%
Mar 13Easy Accordion – Best Accordion FAQ Plugin for WordPress <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2023-52124
WT
WP Tabs
Shapedplugin
5.4
0%
Jan 5WordPress WP Tabs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-0537
PS
Product Slider For Woocommerce
Shapedplugin
5.4
1%
May 8Product Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSS
CVE-2023-25065
WT
WP Tabs – Responsive Tabs Plugin for WordPress
ShapedPlugin
8.8
0%
Feb 14WordPress WP Tabs Plugin <= 2.1.14 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-0360
LW
Location Weather
Shapedplugin
5.4
1%
Feb 13Location Weather < 1.3.4 - Contributor+ Stored XSS
CVE-2023-0097
SP
Smart Post Show
Shapedplugin
5.4
0%
Jan 30Post Grid, Post Carousel, & List Category Posts < 2.4.19 - Contributor+ Stored XSS
CVE-2023-0071
WT
WP Tabs
Shapedplugin
5.4
1%
Jan 30WP Tabs < 2.1.17 - Contributor+ Stored XSS
CVE-2022-4629
PS
Product Slider For Woocommerce
Shapedplugin
5.4
0%
Jan 23Product Slider for WooCommerce < 2.6.4 - Contributor+ Stored XSS in Shortcode
CVE-2022-4648
RT
Real Testimonials
Shapedplugin
5.4
0%
Jan 16Real Testimonials < 2.6.0 - Contributor+ Stored XSS
CVE-2022-2382
PS
Product Slider For Woocommerce
Shapedplugin
4.3
0%
Aug 22Product Slider for WooCommerce < 2.5.7 - Subscriber+ Arbitrary Options Deletion
CVE-2021-24739
LC
Logo Carousel
Shapedplugin
8.1
1%
Dec 21Logo Carousel < 3.4.2 - Unauthorised Private Post Access
CVE-2021-24738
LC
Logo Carousel
Shapedplugin
5.4
1%
Dec 21Logo Carousel < 3.4.2 - Contributor+ Stored Cross-Site Scripting