Shown Connector

Shown Connector has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Shown Connector has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Legion Hunter. Shown Connector is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Shown Connector vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2025-68003

Shown Connector <= 1.2.10 - Missing Authorization to Unauthenticated Settings Update

Read the full analysis

Vulnerability Records

1 records
Shown Connector banner
Latestv1.2.10

Shown Connector

renatoatshown

Author

renatoatshown

0.0(0)
0/100
Last Updated
2025-10-01 (1y ago)
Active Installs
300+
Downloads
8,574
Requires WP
6.3+
Requires PHP
7.4+
Tested up to
WP 6.8.8
Created
2024-03-26 (3y ago)

The Shown Connector simplifies your business setup on Shown.io, making your advertising more efficient. It automates ad tracking by installing the Shown pixel on your website and detecting key website actions (conversions). Additionally, it synchronizes customer emails to help Shown create better audiences, optimizing your ad performance. Finally, it syncs your products, enabling shopping ads across multiple platforms. Data is exchanged with Shown.io under the terms of service and privacy policy. In the plugin settings, you can choose which data types to synchronize. What is Shown.io Shown is an AI-powered advertising platform designed to make online advertising accessible to everyone. It simplifies the creation and management of cross-channel ad campaigns by utilizing integrations with platforms like WordPress, AI technology, and a dedicated team of ad experts committed to ensuring your success. For more information, please visit https://www.shown.io. Shown pixel & conversion tracking The Shown Pixel works similarly to Google Tag Manager, automatically injecting channel-specific tags like the Facebook Pixel and Google Ads tag on your website. This eliminates the need for manual setup for each platform. Additionally, the Shown Connector enables automatic tracking of key conversions, such as completed purchases and add-to-cart actions. These pixels and conversion tracking are essential for monitoring ad performance and optimizing your campaigns for more sales or leads. Importantly, we do not store any metrics on our servers, ensuring full end-user data privacy and compliance with privacy regulations. Products synchronization The store owner has full control over which products to synchronize with Shown, with the option to either sync all products at once or individually as they are created. These product lists are exclusively used for launching shopping campaigns on platforms like Google Ads, Facebook Ads, or any other channel supported by Shown. Customers synchronization The store owner has full control over which customers (emails) to synchronize with Shown, with the option to either sync all customers at once or individually as they place new orders. This customer data is exclusively used for creating lookalike & retargeting audiences on platforms like Google Ads, Facebook Ads, or any other channel supported by Shown.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C