← WordPress Vulnerabilities
WordPress security by component

Applay - Shortcodes

Applay - Shortcodes is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Feb 20, 2026; the highest CVE/CNA score is 9.8.

Plugin slug: applay-shortcodes

CVE-2026-22384: Applay - Shortcodes: Code execution

Applay - Shortcodes is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedFeb 20, 2026
Safe version guidanceSee mitigation notes
Safe version
Feb 20, 2026 CVE-2026-22384
Applay - Shortcodes: Code execution
Applay - Shortcodes is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE9.8
NVDPending