SherkSpear
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Add Ribbon Shortcode | 1 | – | Nov 19, 2024 |
| Sherk Custom Post Type Displays | 1 | – | Mar 21, 2026 |
Exploited and recent CVEs
- CVE-2026-3554 Sherk Custom Post Type Displays <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute 0.2%
- CVE-2024-51823 WordPress Add Ribbon Shortcode plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability 0.4%