Themify Shortcodes
Themify Shortcodes has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 5 are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Scripting, behind 5 of the records (100%).
Every one of the 5 issues recorded for Themify Shortcodes has a vendor fix available, so running the current release closes all known holes.
5 independent researchers contributed these findings, one record each. Themify Shortcodes is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2025-39581Themify Shortcodes <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Themify Shortcodes
Author
themifyme
Use 16 Themify shortcodes with the free Themify Shortcodes Plugin. We’ve taken all the same shortcodes available in our Themify themes, and placed it into this plugin to give everyone the ability to use it with any third-party WordPress theme. This plugin also comes with a shortcode generator on the text editor, allowing you to easily insert shortcodes without having to manually type it and its parameters. Working Demo | Shortcode documentation included shortcodes: Button Column Horizontal Ruler Quote Logged In User Message Guest User Message Map Video Flickr Twitter Post Slider Slider List Posts Box Author Box Icon Icon List
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C