WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gravity-signature-forms-add-on
Published
2025-12-31
Title
Signature Add-On for Gravity Forms < 1.8.7 - Missing Authorization
Slug
gravityforms
Published
2014-12-08
Title
Gravity Forms <= 1.8.19 - Arbitrary File Upload
Slug
gravityforms
Published
2015-03-17
Title
Gravity Forms 1.8 <= 1.9.3.5 - Authenticated Blind SQL Injection
Slug
gravityforms
Published
2015-04-20
Title
Gravity Forms <= 1.9.6 - Cross-Site Scripting (XSS)
Slug
gravityforms
Published
2016-03-01
Title
Gravity Forms < 1.9.16 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
gravityforms
Published
2016-10-13
Title
Gravity Forms < 2.0.7 - Authenticated Blind Cross-Site Scripting (XSS)
Slug
gravityforms
Published
2019-05-08
Title
GravityForms < 2.4.9 - Hashed Password Leakage
Slug
gravityforms
Published
2023-05-29
Title
Gravity Forms < 2.7.4 - Unauthenticated PHP Object Injection
Slug
gravityforms
Published
2023-06-21
Title
Gravity Forms < 2.7.5 - Reflected XSS
Slug
gravityforms
Published
2025-01-16
Title
GravityForms 2.9.0.1 - 2.9.1.3 - Unauthenticated Stored Cross-Site Scripting via 'style_settings' parameter
Slug
gravityforms
Published
2025-01-16
Title
GravityForms < 2.9.2 - Unauthenticated Stored Cross-Site Scripting via 'alt' parameter
Slug
gravityforms
Published
2025-07-11
Title
GravityForms 2.9.11.1 / 2.9.12 - Malware Compromise
Slug
gravityforms
Published
2025-11-06
Title
Gravity Forms 2.9.18 - 2.9.20 - Unauthenticated Arbitrary File Upload via 'copy_post_image'
Slug
gravityforms
Published
2025-11-17
Title
Gravity Forms < 2.9.22 - Unauthenticated Arbitrary File Upload via Legacy Chunked Upload
Slug
gravityforms
Published
2025-12-03
Title
GravityForms < 2.9.23.1 - Unauthenticated Arbitrary File Upload
Slug
gravityformswebhooks
Published
2025-04-30
Title
Gravity Forms WebHooks < 1.7.0 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
Slug
gravitywp-merge-tags
Published
2025-08-08
Title
GravityWP - Merge Tags < 1.4.5 - Unauthenticated Local File Inclusion
Slug
great-quotes
Published
2021-09-27
Title
Great Quotes <= 1.0.0 - Admin+ Stored Cross-Site Scripting
Slug
greek-multi-tool
Published
2025-03-27
Title
Greek Multi Tool – Fix peralinks, accents, auto create menus and more < 2.3.2 - Missing Authorization
Slug
greek-multi-tool
Published
2025-03-05
Title
Greek Multi Tool < 2.3.2 - Unauthenticated Stored XSS
Slug
greek-namedays-widget
Published
2025-01-16
Title
Greek Namedays Widget From Eortologio.Net <= 20191113 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
greeklish-permalink
Published
2023-06-19
Title
Greeklish-permalink < 3.5 - Unauthenticated Post Slug Update
Slug
green-money-payment-gateway
Published
2025-04-07
Title
GreenPay(tm) by Green.Money 3.0.0 - 3.0.9 - Unauthenticated Information Exposure
Slug
green-wp-telegram-bot-by-teplitsa
Published
2024-10-21
Title
TeploBot - Telegram Bot for WP <= 1.3 - Telegram Bot Token Disclosure
Slug
greencon
Published
2024-11-08
Title
GreenCon <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting