WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gm-woocommerce-quote-popup
Published
2023-12-28
Title
Product Enquiry for WooCommerce < 3.1 - Arbitrary Enquiry Deletion via CSRF
Slug
gm-woocommerce-quote-popup
Published
2024-01-15
Title
Product Enquiry for WooCommerce < 3.2 - Reflected XSS
Slug
gmace
Published
2023-03-29
Title
GMAce <= 1.5.2 - Arbitrary File Creation/Deletion/Update via CSRF
Slug
gmace
Published
2023-02-28
Title
GMace <= 1.5.2 - Admin+ Path Traversal
Slug
gmap-embed
Published
2021-07-01
Title
WP Google Map < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
gmap-embed
Published
2021-12-08
Title
WP Google Map < 1.8.1 - Subscriber+ Map Creation/Update/Deletion
Slug
gmap-embed
Published
2021-12-08
Title
WP Google Map < 1.8.1 - Subscriber+ Arbitrary Post Deletion and Plugin's Settings Update
Slug
gmap-embed
Published
2022-01-27
Title
WP Google Map < 1.8.4 - Arbitrary Post Deletion and Plugin's Settings Update via CSRF
Slug
gmap-embed
Published
2025-01-24
Title
WP Google Map < 1.9.4 - Admin+ Stored XSS
Slug
gmap-embed
Published
2025-01-24
Title
WP Google Map < 1.9.4 - Admin+ Stored XSS
Slug
gmap-point-list
Published
2024-10-31
Title
Gmap Point List <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gmap-shortcode
Published
2025-01-16
Title
GMap Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gmap-targeting
Published
2025-07-31
Title
Google Map Targeting < 1.1.7 - Authenticated (Subscriber+) Local File Inclusion
Slug
gmap-venturit
Published
2025-08-11
Title
GMap - Venturit <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'h' Parameter
Slug
gmaper-elementor
Published
2025-12-31
Title
Gmaper for Elementor <= 1.0.9 - Missing Authorization
Slug
gmaps-for-visual-composer-free
Published
2025-01-16
Title
GMAPS for WPBakery Page Builder Free <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gmapsmania
Published
2025-05-01
Title
GmapsMania <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
gmb-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
gmo-font-agent
Published
2025-03-24
Title
GMO Font Agent <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gmo-social-connection
Published
2024-11-01
Title
GMO Social Connection <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
gmw-premium-settings
Published
2024-10-31
Title
GEO My WordPress < 4.5 - Admin+ Arbitrary File Upload
Slug
gn-publisher
Published
2023-02-27
Title
GN Publisher < 1.5.6 - Reflected XSS
Slug
gn-xml-sitemap
Published
2025-08-25
Title
Google XML News Sitemap plugin <= 0.02 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
gna-search-shortcode
Published
2025-04-24
Title
GNA Search Shortcode <= 0.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gnu-mailman-integration
Published
2021-09-09
Title
GNU-Mailman Integration <= 1.0.6 - Reflected Cross-Site Scripting