Plugin icon

Gwolle Guestbook

gwolle-gb

Vulnerabilities:

8

Last Updated:

October 14, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
Gwolle Guestbook < 5.1.2 - Reflected Cross-Site Scripting via 'permalink' Parameter
Fixed in
Fixed in 5.1.2
CVSS
6.1 (medium)
Published
2025-07-09
Title
Gwolle Guestbook < 4.9.3 - Unauthenticated Stored Cross-Site Scripting via `gwolle_gb_content` Parameter
Fixed in
Fixed in 4.9.3
CVSS
6.1 (medium)
Published
2025-01-31
Title
Gwolle Guestbook < 4.7.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.7.2
CVSS
6.1 (medium)
Published
2021-11-23
Title
Gwolle Guestbook < 4.2.0 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.2.0
CVSS
6.1 (medium)
Published
2018-07-28
Title
Gwolle Guestbook <= 2.5.3 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.5.4
CVSS
6.1 (medium)
Published
2017-03-01
Title
Gwolle Guestbook <= 2.1.0 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 2.1.1
CVSS
n/a
Published
2017-03-01
Title
Gwolle Guestbook <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.1.1
CVSS
n/a
Published
2015-10-21
Title
Gwolle Guestbook <= 1.5.3 - Remote File Inclusion (RFI)
Fixed in
Fixed in 1.5.4
CVSS
9.0 (critical)