ShapedPlugin LLC vulnerabilities and threats

4 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2026-66433Location Weather (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-07-27CVE Database V5CVE-2026-66433 Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions. EPSS 0.2%Vulnerability ShapedPlugin CWE-79	CVE Database V5	2026-07-27
High	7.2	EPSS 0.5%	CVE-2026-59521Real Testimonials (WordPress plugin) · Deserialization of Untrusted Data High7.2EPSS 0.5%2026-07-13CVE Database V5CVE-2026-59521 Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Real Testimonials testimonial-free allows Object Injection.This issue affects Real Testimonials: from n/a through <= 3.1.15. EPSS 0.5%Vulnerability ShapedPlugin CWE-502	CVE Database V5	2026-07-13
Medium	6.5	EPSS 0.2%	CVE-2025-58228Quick View for WooCommerce (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-09-22CVE Database V5CVE-2025-58228 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShapedPlugin LLC Quick View for WooCommerce woo-quickview allows Stored XSS.This issue affects Quick View for WooCommerce: from n/a through <= 2.2.16. EPSS 0.2%Vulnerability ShapedPlugin	CVE Database V5	2025-09-22
Medium	6.5	EPSS 0.3%	CVE-2025-22269Real Testimonials (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2025-04-15CVE Database V5CVE-2025-22269 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShapedPlugin LLC Real Testimonials testimonial-free allows Stored XSS.This issue affects Real Testimonials: from n/a through <= 3.1.6. EPSS 0.3%Vulnerability ShapedPlugin	CVE Database V5	2025-04-15

Page 1 of 1