What’s Vulnerable › Products

getgrav grav-plugin-shortcode-core vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your getgrav grav-plugin-shortcode-core version is affected

Latest getgrav grav-plugin-shortcode-core vulnerabilities

• CVE-2026-85599 — Grav Shortcode Core before 6.2.5 Stored XSS via unescaped parameters (CVSS 7.2)
• CVE-2026-64851 — Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers (CVSS 8.5)