CVE

CVE-2026-0738 — Shortcodes Ultimate < 7.4.9 - authenticated (Contributor+) Stored Cross-Site Scripting via 'su_carousel' Shortcode

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-0738 Shortcodes Ultimate < 7.4.9 - authenticated (Contributor+) Stored Cross-Site Scripting via 'su_carousel' Shortcode Unknown < 7.4.9 7.4.9

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.