amr shortcodes
amr shortcodes has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for amr shortcodes has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.
All of these findings were reported by Le Ngoc Anh. amr shortcodes is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.7.17.
CVE-2024-52464amr shortcodes <= 1.7 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
amr shortcodes
Author
anmari
View the shortcodes available and used on your site, with links to the pages or posts that contain the shortcode text. Check if a page has a shortcode for which the plugin is not active. A red cross indicates if the function for that shortcode is still activated.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C