Shapedplugin LLC vulnerabilities
8 vulnerabilities
Known vulnerabilities in Shapedplugin LLC products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 7 products.
Products
7- Real Testimonials2 vulnerabilities
- Category Slider For Woocommerce1 vulnerabilities
- Location Weather1 vulnerabilities
- Product Slider Pro For Woocommerce1 vulnerabilities
- Quick View For Woocommerce1 vulnerabilities
- WP Tabs1 vulnerabilities
- WP Tabs – Responsive Tabs Plugin For Wordpress1 vulnerabilities
CVE-2025-48134shapedplugin llcwp tabs+2
EPSS score0.48%
Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC WP Tabs wp-expand-tabs-free allows Object Injection.This issue affects WP Tabs: from n/a through <= 2.2.12.CVE-2025-58228shapedplugin llcquick view for woocommerce+1EPSS score0.23%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShapedPlugin LLC Quick View for WooCommerce woo-quickview allows Stored XSS.This issue affects Quick View for WooCommerce: from n/a through <= 2.2.16.CVE-2025-22269shapedplugin llcreal testimonials+1EPSS score0.27%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShapedPlugin LLC Real Testimonials testimonial-free allows Stored XSS.This issue affects Real Testimonials: from n/a through <= 3.1.6.CVE-2026-59521shapedplugin llcreal testimonials+1EPSS score0.54%
Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Real Testimonials testimonial-free allows Object Injection.This issue affects Real Testimonials: from n/a through <= 3.1.15.CVE-2026-66433shapedplugin llclocation weather+1EPSS score0.22%
Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions.CVE-2026-49777shapedplugin, llcproduct slider pro for woocommerceEPSS score2.02%
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted.
This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.CVE-2023-52124shapedplugin llcwp tabs – responsive tabs plugin for wordpress+2EPSS score0.30%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShapedPlugin LLC WP Tabs – Responsive Tabs Plugin for WordPress allows Stored XSS.This issue affects WP Tabs – Responsive Tabs Plugin for WordPress: from n/a through 2.2.0.CVE-2023-41132shapedplugin llccategory slider for woocommerce+1EPSS score0.47%
Missing Authorization vulnerability in ShapedPlugin LLC Category Slider for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Category Slider for WooCommerce: from n/a through 1.4.15.