ShrinkTheWeb (STW) Website Previews Plugin
ShrinkTheWeb (STW) Website Previews Plugin has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for ShrinkTheWeb (STW) Website Previews Plugin has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nguyen Xuan Chien. ShrinkTheWeb (STW) Website Previews Plugin is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.8.30.
CVE-2025-58677ShrinkTheWeb (STW) Website Previews <= 2.8.5 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

ShrinkTheWeb (STW) Website Previews Plugin
Author
puravida1976
This plugin allows any WordPress user to easily add thumbnail previews of websites right in the content of their posts using a simple [stwthumb]http://www.yourwebsite.com[/stwthumb] format. Loads of examples are available within the plugin documentation (you’ll see it when you activate the plugin). The plugin requires a free or paid account from the thumbnail provider service ShrinkTheWeb.com. No purchase is required to use the plugin or the free service. Cool Features Easily embed web page screenshots anywhere using shortcode! So simple to use with TinyMCE shortcode helper! Supports caching screenshots locally Plenty of examples in the plugin documentation Custom screenshot image quality Enable mouseover (hover) screenshot previews Alt and Title attributes support via shortcodes Custom filename option support via shortcode for SEO purposes Supported ShrinkTheWeb PRO features Display “Inside Pages” or full URLs (Upgrade required) …rather than just the homepage of a domain. Full-Length screenshot captures (Upgrade required) Custom Size screenshot captures (Upgrade required) Custom Browser Resolution (Upgrade required) Take a look at ShrinkTheWeb for more information Shrink The Web. Donate Did this plugin get you out of trouble? Please consider making a small donation to thank the developer for their time.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C