← WordPress Vulnerabilities
WordPress security by component

IF AS Shortcode

IF AS Shortcode is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 29, 2025; the highest CVE/CNA score is 9.9.

Plugin slug: if-as-shortcode

CVE-2025-68897: IF AS Shortcode: Code execution

IF AS Shortcode is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedDec 29, 2025
Safe version guidanceSee mitigation notes
Safe version
Dec 29, 2025 CVE-2025-68897
IF AS Shortcode: Code execution
IF AS Shortcode is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE9.9
NVDPending