CVE-2025-7354 | WP Shortcodes Plugin up to 7.4.2 on WordPress Shortcode preview cross-site request forgery

July 20, 2025 Yanac

A vulnerability has been found in WP Shortcodes Plugin up to 7.4.2 on WordPress and classified as problematic. Affected by this vulnerability is the function preview of the component Shortcode Handler. The manipulation leads to cross-site request forgery.

This vulnerability is known as CVE-2025-7354. The attack can be launched remotely. There is no exploit available.VulDB Recent EntriesRead More