ShapedPlugin LLC
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Real Testimonials | 2 | – | Jul 13, 2026 |
| Location Weather | 1 | – | Jul 27, 2026 |
| Product Slider Pro for WooCommerce | 1 | – | Jun 5, 2026 |
| Category Slider for WooCommerce | 1 | – | Dec 13, 2024 |
| WP Tabs | 1 | – | May 16, 2025 |
| WP Tabs – Responsive Tabs Plugin for WordPress | 1 | – | Jan 5, 2024 |
| Quick View for WooCommerce | 1 | – | Sep 22, 2025 |
Exploited and recent CVEs
- CVE-2026-66433 WordPress Location Weather plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-59521 WordPress Real Testimonials plugin <= 3.1.15 - PHP Object Injection vulnerability 0.5%
- CVE-2026-49777 WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability 1.7%
- CVE-2025-58228 WordPress Quick View for WooCommerce Plugin <= 2.2.16 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-48134 WordPress WP Tabs plugin <= 2.2.12 - PHP Object Injection Vulnerability 0.5%
- CVE-2025-22269 WordPress Real Testimonials plugin <= 3.1.6 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2023-41132 WordPress Category Slider for WooCommerce plugin <= 1.4.15 - Broken Access Control vulnerability 0.5%
- CVE-2023-52124 WordPress WP Tabs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS) 0.3%