Plugin icon

Garden Gnome Package

garden-gnome-package

Vulnerabilities:

4

Last Updated:

May 21, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-02-21
Title
Garden Gnome Package <= 2.4.1 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
5.5 (medium)
Published
2025-01-07
Title
Garden Gnome Package < 2.4.0 - Authenticated (Author+) Arbitrary File Upload
Fixed in
Fixed in 2.4.0
CVSS
8.8 (high)
Published
2024-09-23
Title
Garden Gnome Package < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.0
CVSS
6.4 (medium)
Published
2023-11-06
Title
Garden Gnome Package < 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 2.2.9
CVSS
6.4 (medium)