Read the docs

SherkSpear

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

SherkSpear records in CISA KEV

No SherkSpear vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-34727 CVE-2024-51823 · GHSA-qrvg-j482-9r53

WordPress Add Ribbon Shortcode plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SherkSpear Add Ribbon Shortcode add-ribbon allows DOM-Based XSS.This issue affects Add Ribbon Shortcode: from n/a thro…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00389 Published 2024-11-19 No fix listed CWE-79
TI-2026-03064 CVE-2026-3554 · GHSA-x8x7-xgj7-47r4

Cross-site scripting in SherkSpear Sherk Custom Post Type Displays

Priority LOW 28

The Sherk Custom Post Type Displays plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' shortcode attribute in all versions up to, and including, 1.2.1.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00217 Published 2026-03-21 No fix listed CWE-79
Open these records in search →