ShapedPlugin vulnerabilities
We track 5 vulnerabilities in ShapedPlugin products across 8 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.
Latest ShapedPlugin vulnerabilities
- 7.2 High severity
Real Testimonials: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Real Testimonials testimonial-free allows Object Injection.This issue affects Real Testimonials: from n/a through <= 3.1.15.
- 10.0 Critical severity
Product Slider Pro for WooCommerce: Improper Validation of Specified Quantity in Input
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.
- 7.2 High severity
Smart Post Show – Post Grid, Post Carousel &…: Deserialization of Untrusted Data
The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.12 via deserialization of untrusted input in the import_shortcodes() function.
- 7.2 High severity
WP Tabs: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC WP Tabs wp-expand-tabs-free allows Object Injection.This issue affects WP Tabs: from n/a through <= 2.2.12.
- 7.2 High severity
Carousel, Slider, Photo Gallery with Lightbox…: Deserialization of Untrusted Data
The plugin is vulnerable to PHP Object Injection in versions up to and including, 2.6.3 via deserialization of untrusted input in the import function via the 'shortcode' parameter. This allows authenticated attackers, with administrator-level access to inject