WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
go-social
Published
2025-01-16
Title
go Social <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
go-sphinx
Published
2025-01-16
Title
Gigaom Sphinx <= 0.1 - Reflected Cross-Site Scripting
Slug
go-to-top
Published
2025-03-11
Title
Go To Top <= 0.0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
go-viral
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
go-viral
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
go_pricing
Published
2023-05-23
Title
Go Pricing - WordPress Responsive Pricing Tables < 3.4 - Contributor+ Stored XSS
Slug
go_pricing
Published
2023-05-23
Title
Go Pricing - WordPress Responsive Pricing Tables < 3.4 - Broken Access Control
Slug
go_pricing
Published
2023-05-23
Title
Go Pricing - WordPress Responsive Pricing Tables < 3.4 - Incorrect Authorization leading to Arbitrary File Upload
Slug
go_pricing
Published
2023-05-23
Title
Go Pricing - WordPress Responsive Pricing Tables < 3.4 - Contributor+ PHP Object Injection via shortcode
Slug
goal-tracker-for-patreon
Published
2025-08-25
Title
Goal Tracker for Patreon <= 0.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
goal-tracker-ga
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
goal-tracker-ga
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
goanimate
Published
2024-12-12
Title
Go Animate <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
goauth
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
goauth
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
gocache-cdn
Published
2025-10-17
Title
GoCache < 1.3.7 - Missing Authorization
Slug
gocodes
Published
2015-11-24
Title
GoCodes <= 1.3.5 - Authenticated XSS & Blind SQL Injection
Slug
godaddy-email-marketing-sign-up-forms
Published
2016-10-27
Title
GoDaddy Email Marketing <= 1.1.3 - Cross-Site Request Forgery (CSRF)
Slug
godam
Published
2025-11-21
Title
GoDAM < 1.4.7 - Missing Authorization
Slug
godam
Published
2026-07-22
Title
GoDAM < 2.0.0 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field
Slug
goftino
Published
2024-07-11
Title
Goftino < 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
gold-addons-for-elementor
Published
2024-05-07
Title
Gold Addons for Elementor < 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gold-addons-for-elementor
Published
2024-12-05
Title
Gold Addons for Elementor <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) License Activation/Deactivation
Slug
gold-price-chart-widget
Published
2023-11-07
Title
Live Gold Price & Silver Price Charts Widgets <= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Slug
goldstar
Published
2025-01-16
Title
Goldstar <= 2.1.1 - Missing Authorization