The Shortcodes Ultimate plugin for WordPress has a security flaw that affects versions up to 5.12.6. This flaw allows people with certain levels of access to the website to make requests to any other website from the same web application. This could be used to get information or change data on other websites.