WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
glossary-by-codeat
Published
2023-01-27
Title
Glossary < 2.1.28 - Contributor+ Stored XSS
Slug
glossary-by-codeat
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
glossary-by-codeat
Published
2024-07-15
Title
Glossary < 2.2.27 - Unauthenticated Full Path Disclosure
Slug
glossy
Published
2025-01-14
Title
Glossy <= 2.3.5 - Reflected XSS
Slug
gls-shipping-for-woocommerce
Published
2025-12-29
Title
GLS Shipping for WooCommerce < 1.4.1 - Reflected Cross-Site Scripting
Slug
gm-woo-product-list-widget
Published
2022-12-08
Title
Product list Widget for Woocommerce <= 1.0 - Reflected XSS
Slug
gm-woocommerce-quote-popup
Published
2023-11-07
Title
Product Enquiry for WooCommerce < 3.1 - Unauthenticated Stored XSS
Slug
gm-woocommerce-quote-popup
Published
2023-11-07
Title
Product Enquiry for WooCommerce < 3.2 - Reflected XSS
Slug
gm-woocommerce-quote-popup
Published
2023-12-04
Title
Product Enquiry for WooCommerce < 3.1 - Cross-Site Request Forgery
Slug
gm-woocommerce-quote-popup
Published
2023-12-28
Title
Product Enquiry for WooCommerce < 3.1 - Admin+ Stored XSS
Slug
gm-woocommerce-quote-popup
Published
2023-12-28
Title
Product Enquiry for WooCommerce < 3.1 - Arbitrary Enquiry Deletion via CSRF
Slug
gm-woocommerce-quote-popup
Published
2024-01-15
Title
Product Enquiry for WooCommerce < 3.2 - Reflected XSS
Slug
gmace
Published
2023-03-29
Title
GMAce <= 1.5.2 - Arbitrary File Creation/Deletion/Update via CSRF
Slug
gmace
Published
2023-02-28
Title
GMace <= 1.5.2 - Admin+ Path Traversal
Slug
gmap-embed
Published
2021-07-01
Title
WP Google Map < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
gmap-embed
Published
2021-12-08
Title
WP Google Map < 1.8.1 - Subscriber+ Map Creation/Update/Deletion
Slug
gmap-embed
Published
2021-12-08
Title
WP Google Map < 1.8.1 - Subscriber+ Arbitrary Post Deletion and Plugin's Settings Update
Slug
gmap-embed
Published
2022-01-27
Title
WP Google Map < 1.8.4 - Arbitrary Post Deletion and Plugin's Settings Update via CSRF
Slug
gmap-embed
Published
2025-01-24
Title
WP Google Map < 1.9.4 - Admin+ Stored XSS
Slug
gmap-embed
Published
2025-01-24
Title
WP Google Map < 1.9.4 - Admin+ Stored XSS
Slug
gmap-point-list
Published
2024-10-31
Title
Gmap Point List <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gmap-shortcode
Published
2025-01-16
Title
GMap Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gmap-targeting
Published
2025-07-31
Title
Google Map Targeting < 1.1.7 - Authenticated (Subscriber+) Local File Inclusion
Slug
gmap-targeting
Published
2026-02-05
Title
GMap Targeting < 1.1.8 - Unauthenticated Stored Cross-Site Scripting
Slug
gmap-venturit
Published
2025-08-11
Title
GMap - Venturit <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'h' Parameter