gn_themes Shortcodes Ultimate – Content Elements

• CVE-2026-3885 Medium 6.4 WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_box Shortcode 0.3%
• CVE-2024-5647 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library 0.4%