← WordPress Vulnerabilities
WordPress security by component

IF AS Shortcode

IF AS Shortcode (if-as-shortcode) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 29, 2025; the highest published CVSS base score is 9.9.

Plugin slug: if-as-shortcode

CVE-2025-68897: IF AS Shortcode: Code execution

IF AS Shortcode is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedDec 29, 2025
Safe version guidanceSee mitigation notes
Published vulnerabilities for if-as-shortcode
Safe version
Dec 29, 2025 CVE-2025-68897
IF AS Shortcode: Code execution
IF AS Shortcode is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE9.9
NVDPending