VYPR

Simple Divi Shortcode

by WordPress

CVEs (1)

  • CVE-2026-9714MedMay 29, 2026
    risk 0.42cvss 6.4epss

    The Simple Divi Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the [showmodule] shortcode in versions up to, and including, 1.2 This is due to insufficient input sanitization and output escaping in the showmodule_shortcode()…