WPIntell

Source evidence

Unauthenticated Arbitrary Shortcode Execution

Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation · support · 2025-05-19T08:54:00+00:00

unknownsentiment
unknownseverity
0relevance
1replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

7 / 26 rows with source links

26.9% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

19 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
kromaweb resolved
Hello, I’m reporting that the plugin has a security flaw called “Unauthenticated Arbitrary Shortcode Execution.” Can you fix this issue? Thank you. Hi kromaweb, Thank you for bringing this to our attention. We’d like to confirm that the reported issue was fixed in March 2025 , as part of the version 3.7.4 release. 🛠️ Version 3.7.4 – Released on 16th Mar 2025 [Fixed] : Unauthenticated Arbitrary Shortcode Execution Please update to the latest version to ensure your site is secure and fully patched. You can also review the changelog for details. If you need any assistance with the update or have further questions, feel free to reach out —we’re here to help! Best regards, Sarwar Zaman

Comments

1 shown
Md. Sarwar Zaman 2025-05-19T09:18:00+00:00

Hi kromaweb, Thank you for bringing this to our attention. We’d like to confirm that the reported issue was fixed in March 2025 , as part of the version 3.7.4 release. 🛠️ Version 3.7.4 – Released on 16th Mar 2025 [Fixed] : Unauthenticated Arbitrary Shortcode Execution Please update to the latest version to ensure your site is secure and fully patched. You can also review the changelog for details. If you need any assistance with the update or have further questions, feel free to reach out —we’re here to help! Best regards, Sarwar Zaman