plugin

Mixlr Shortcode Vulnerabilities

2 known security issues reported for the Mixlr Shortcode WordPress plugin. Most recent disclosed Oct 21, 2025.

1 medium

Running Mixlr Shortcode on your site? Check whether your installed version is affected.

Scan your site free

Mixlr Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

medium

The Mixlr Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mixlr' shortcode in all versions up to, and including, 1.0.1. This is due to insufficient input sanitization and output escaping on the 'url' attribute. This makes it possible for authenticated attackers, with contributor-lev...

CVSS:
6.4
Affected:
up to 1.0.1
Fix:
No patched version reported
Disclosed:
Oct 21, 2025

CVE-2025-11807 on NVD →

Mixlr Shortcode [mixlr-shortcode] <= 1.0.1 (unfixed)

unknown
Affected:
up to 1.0.1
Fix:
No patched version reported

CVE-2025-11807 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database