Shazdeh
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Administrative Shortcodes | 2 | – | Jan 24, 2026 |
| Header Image Slider | 1 | – | Jan 6, 2026 |
| Query Shortcode | 1 | – | May 27, 2026 |
Exploited and recent CVEs
- CVE-2026-9200 Query Shortcode <= 0.2.1 - Authenticated (Contributor+) Local File Inclusion via 'lens' Shortcode Attribute 0.5%
- CVE-2026-1099 Administrative Shortcodes <= 0.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'login' and 'logout' Shortcode Attributes 0.3%
- CVE-2026-1257 Administrative Shortcodes <= 0.3.4 - Authenticated (Contributor+) Local File Inclusion via 'slug' Shortcode Attribute 0.7%
- CVE-2024-30547 WordPress Header Image Slider plugin <= 0.3 - Cross Site Scripting (XSS) vulnerability 0.2%