ShrinkTheWeb (STW) Website Previews Plugin

ShrinkTheWeb (STW) Website Previews Plugin has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for ShrinkTheWeb (STW) Website Previews Plugin has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Nguyen Xuan Chien. ShrinkTheWeb (STW) Website Previews Plugin is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.8.30.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all ShrinkTheWeb (STW) Website Previews Plugin vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-58677

ShrinkTheWeb (STW) Website Previews <= 2.8.5 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records
ShrinkTheWeb (STW) Website Previews Plugin banner
Latestv2.8.5

ShrinkTheWeb (STW) Website Previews Plugin

puravida1976

Author

puravida1976

3.7(6)
74/100
Last Updated
2017-08-04 (9y ago)
Active Installs
60+
Downloads
20,032
Requires WP
2.9+
Requires PHP
0+
Tested up to
WP 4.8.30
Created
2010-04-05 (17y ago)

This plugin allows any WordPress user to easily add thumbnail previews of websites right in the content of their posts using a simple [stwthumb]http://www.yourwebsite.com[/stwthumb] format. Loads of examples are available within the plugin documentation (you’ll see it when you activate the plugin). The plugin requires a free or paid account from the thumbnail provider service ShrinkTheWeb.com. No purchase is required to use the plugin or the free service. Cool Features Easily embed web page screenshots anywhere using shortcode! So simple to use with TinyMCE shortcode helper! Supports caching screenshots locally Plenty of examples in the plugin documentation Custom screenshot image quality Enable mouseover (hover) screenshot previews Alt and Title attributes support via shortcodes Custom filename option support via shortcode for SEO purposes Supported ShrinkTheWeb PRO features Display “Inside Pages” or full URLs (Upgrade required) …rather than just the homepage of a domain. Full-Length screenshot captures (Upgrade required) Custom Size screenshot captures (Upgrade required) Custom Browser Resolution (Upgrade required) Take a look at ShrinkTheWeb for more information Shrink The Web. Donate Did this plugin get you out of trouble? Please consider making a small donation to thank the developer for their time.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C