TI-2025-00302 CVE-2025-0370 · GHSA-4cx8-mp55-6v39Cross-site scripting in gn_themes WP Shortcodes Plugin — Shortcodes UltimatePriority MEDIUM 55The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘src’ parameter in all versions up to, and including, 7.3.3 due to insufficient input sanitization…CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.36751 · Published 2025-03-04 · No fix listed CWE-79