CSSIgniter Shortcodes
CSSIgniter Shortcodes has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for CSSIgniter Shortcodes has a vendor fix available, so running the current release closes it.
All of these findings were reported by Athiwat Tiprasaharn (Jitlada). CSSIgniter Shortcodes is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-13448CSSIgniter Shortcodes <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'element' Shortcode Attribute
Read the full analysisVulnerability Records
CSSIgniter Shortcodes
Author
Anastis Sourgoutsidis
WordPress blocks are easier to use and this is why we have created a fantastic collection of FREE blocks for the new block editor. Check out GutenBee now! This shortcodes plugin, has been created to complement and be used mainly with CSSIgniter’s premium and free themes. But of course, anyone can use it with any theme. A lot of useful shortcodes are defined. See the plugin’s documentation for a complete guide. Documentation https://www.cssigniter.com/docs/shortcodes/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C