isMobile() Shortcode for WordPress

isMobile() Shortcode for WordPress has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for isMobile() Shortcode for WordPress has a vendor fix available, so running the current release closes it.

All of these findings were reported by Gilang - DJ. isMobile() Shortcode for WordPress is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all isMobile() Shortcode for WordPress vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-6488

isMobile <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via device Parameter

Read the full analysis

Vulnerability Records

1 records


2025-06-26 16:18	isMobile <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via device Parameter isMobile() Shortcode for WordPress <= 1.1.1	`CVE-2025-6488`	6.4 Medium	Gilang - DJ	Yes

Showing 1–1 of 1 reports

Latestv2.0.0

isMobile() Shortcode for WordPress

Author

Jairo Ochoa

5.0(3)

100/100

Last Updated

2026-09-03 (9d ago)

Active Installs

100+

Downloads

4,178

Requires WP

6.0+

Requires PHP

7.4+

Tested up to

WP 7.1

Created

2018-11-05 (8y ago)

This plugin works with the open source Mobile Detect Library. You can get further information on its website. [ismobile device='iphone' debug=true ] Your content [/ismobile] Parameters device: Filters the device where you want the content to be shown. It could be more than one device, simply separate them with comma. debug: Shows Mobile Detect Library installed version. Also shows two arrays. The first one contains the devices which the library detects and the second one contains the devices where you want to show the content. Values android: Shows content in Android devices. chrome: Shows content on Chrome browser (Only works on mobile devices). desktop: Shows content on a computer. Opposite to mobile option. ios: Shows content in iOS devices. ipad: Shows content on a iPad. iphone: Shows content on a iPhone. mobile: Shows content on a mobile device (includes tablets and cell phones). Opposite to desktop option. phone: Shows content on a cell phone. safari: Shows content on Safari browser (Only works on mobile devices). samsung: Shows content on Samsung devices. tablet: Shows content on a tablet.

View on WordPress.org