Shellbot - vulnerabilities (CVEs)

2 CVEs in 2 products, 0 in the last 30 days, newest from 2026-02-14.

Products

• Easy Image Display - 1 CVEs
• Ravelry Designs Widget - 1 CVEs

Newest CVEs of Shellbot

• CVE-2026-1903 - CVSS 6.4 (medium), 2026-02-14: The Ravelry Designs Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'layout' attribute of the 'sb_ravelry_designs' shortcode…
• CVE-2025-28919 - CVSS 6.5 (medium), 2025-03-11: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shellbot Easy Image Display easy-image-display allows…