Rescue Shortcodes
Rescue Shortcodes has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 5 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 5 of the records (100%).
Every one of the 5 issues recorded for Rescue Shortcodes has a vendor fix available, so running the current release closes all known holes.
4 independent researchers contributed these findings, most of them (2) reported by Peter Thaleikis. Rescue Shortcodes is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-62110Rescue Shortcodes <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Rescue Shortcodes
Author
Rescue Themes
When activated, this plugin will add a button to the WordPress text editor to easily insert shortcodes to your posts or pages. Included shortcodes: Button – With many options including unlimited colors and Icons. Content Toggle – Maybe for an awesome FAQ page. Tabbed Content – Create tabbed sections for your content. Font Awesome Icons – 500+ icons and counting. Animations – Wrap anything with the animation shortcode and watch it come alive. Notification Box – Have certain sections of text stand out by creating notices or alerts. Text Highlight – Quickly highlight sections of text to help more important words stand out. Columns – Separate your content with multiple column options. Spacing – Add space between sections on the fly. Progress Bar – Display a sliding progress notification bar License Info Font Awesome – http://fontawesome.io Fonts: SIL OFL 1.1, CSS: MIT License – http://fontawesome.io/license Copyright: @davegandy Wow.js – https://github.com/matthieua/WOW MIT License – https://github.com/matthieua/WOW/blob/master/LICENSE-MIT Copyright: @mattaussaguel animate.css – https://github.com/daneden/animate.css MIT License – https://github.com/daneden/animate.css#license Copyright: @_dte Waypoints – https://github.com/imakewebthings/waypoints MIT License – https://github.com/imakewebthings/waypoints/blob/master/licenses.txt Copyright: @foodgoesinmouth
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C