CVE-2025-11764

Name of the Vulnerable Software and Affected Versions Shortcodes Bootstrap plugin for WordPress versions prior to 1.2

Description The Shortcodes Bootstrap plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'type' parameter within the [notification] shortcode. This occurs because of insufficient input sanitization and output escaping. An authenticated attacker with contributor-level access or higher can inject arbitrary web scripts into pages. These scripts will then execute when a user accesses the compromised page.

Recommendations Update the Shortcodes Bootstrap plugin to version 1.2 or later.