TI-2025-13282 CVE-2025-14539 · GHSA-h9xh-g5pc-79x3
Shortcode Loader <= 1.0 - Unauthenticated Arbitrary Shortcode Execution via 'code' Parameter
Priority LOW 24
The The Shortcode Ajax plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0.