WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
graph-lite
Published
2025-01-16
Title
WordPress Graphs & Charts <= 2.0.8 - Missing Authorization
Slug
graphcomment-comment-system
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
graphicsly
Published
2024-09-24
Title
Graphicsly – The ultimate graphics plugin for WordPress website builder ( Gutenberg, Elementor, Beaver Builder, WPBakery ) <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
graphina-elementor-charts-and-graphs
Published
2024-05-10
Title
Graphina – Elementor Charts and Graphs < 1.8.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
graphina-elementor-charts-and-graphs
Published
2024-08-07
Title
Graphina < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
graphina-elementor-charts-and-graphs
Published
2025-05-07
Title
Graphina < 3.0.5 - Cross-Site Request Forgery to Local File Inclusion
Slug
graphina-elementor-charts-and-graphs
Published
2025-05-07
Title
Graphina < 3.0.5 - Missing Authorization
Slug
graphina-elementor-charts-and-graphs
Published
2025-07-28
Title
Graphina < 3.1.2 - Unauthenticated Local File Inclusion
Slug
graphina-elementor-charts-and-graphs
Published
2025-08-14
Title
Graphina - Elementor Charts and Graphs < 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
graphina-elementor-charts-and-graphs
Published
2025-11-04
Title
Graphina – Elementor Charts and Graphs < 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Widgets
Slug
graphist-elementor
Published
2025-12-31
Title
Graphist <= 1.2.10 - Missing Authorization
Slug
gratisfaction-all-in-one-loyalty-contests-referral-program-for-woocommerce
Published
2024-03-25
Title
Gratisfaction < 4.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gravatarlocalcache
Published
2025-01-16
Title
GravatarLocalCache <= 1.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
gravitate-automated-tester
Published
2025-09-22
Title
Gravitate Automated Tester <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
gravitate-qa-tracker
Published
2017-04-27
Title
Gravitate QA Tracker <= 1.2.1 - Unauthenticated PHP Object Injection
Slug
gravitec-net-web-push-notifications
Published
2025-12-06
Title
Gravitec.net – Web Push Notifications < 2.9.18 - Missing Authorization
Slug
gravity-file-ajax-upload-free
Published
2014-08-01
Title
Gravity Upload Ajax <= 1.1 - Arbitrary File Upload
Slug
gravity-forms-css-themes-with-fontawesome-and-placeholder-support
Published
2025-04-17
Title
Gravity Forms CSS Themes with Fontawesome and Placeholders <= 8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
gravity-forms-multiple-form-instances
Published
2024-07-09
Title
Gravity Forms: Multiple Form Instances < 1.1.2 - Unauthenticated Full Path Disclosure
Slug
gravity-forms-pdf-extended
Published
2022-06-14
Title
Gravity PDF < 6.3.1 - Reflected Cross-Site Scripting
Slug
gravity-forms-sms-notifications
Published
2017-12-14
Title
Multiple Mediaburst/Clockwork Plugins - Cross-Site Scripting (XSS)
Slug
gravity-forms-sticky-list
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
gravity-forms-sticky-list
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
gravity-forms-sticky-list
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
gravity-forms-toolbar
Published
2024-09-30
Title
Gravity Forms Toolbar <= 1.7.0 - Reflected Cross-Site Scripting