Special Text Boxes
Special Text Boxes has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2024; all 3 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 7.3 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Code Injection.
Every one of the 3 issues recorded for Special Text Boxes has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Special Text Boxes is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2024-8481Special Text Boxes <= 6.2.4 - Unauthenticated Arbitrary Shortcode Execution
Read the full analysisVulnerability Records
Special Text Boxes
Author
minimus
Adds little style sheet file and short code to blog for highlighting some portion of text in a post as colored boxes. 7 styles are available. That may be warning, alert, info and download styled portion of the post’s text. If you need to explore the source code of plugin, you can find it on GitHub. Available languages: English Russian If you have created your own language pack, or have an update of an existing one, you can send .po and .mo files to me (minimus AT simplelib.com) so that I can bundle it into Special Text Boxes. Real examples of outputs you can see on the plugin page Compare feature set of different editions of the STB plugin and choose exactly what you need.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C