WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gravityforms
Published
2025-01-16
Title
GravityForms < 2.9.2 - Unauthenticated Stored Cross-Site Scripting via 'alt' parameter
Slug
gravityforms
Published
2025-07-11
Title
GravityForms 2.9.11.1 / 2.9.12 - Malware Compromise
Slug
gravityforms
Published
2025-11-06
Title
Gravity Forms 2.9.18 - 2.9.20 - Unauthenticated Arbitrary File Upload via 'copy_post_image'
Slug
gravityforms
Published
2025-11-17
Title
Gravity Forms < 2.9.22 - Unauthenticated Arbitrary File Upload via Legacy Chunked Upload
Slug
gravityforms
Published
2025-12-03
Title
GravityForms < 2.9.23.1 - Unauthenticated Arbitrary File Upload
Slug
gravityformswebhooks
Published
2025-04-30
Title
Gravity Forms WebHooks < 1.7.0 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
Slug
gravitywp-merge-tags
Published
2025-08-08
Title
GravityWP - Merge Tags < 1.4.5 - Unauthenticated Local File Inclusion
Slug
great-quotes
Published
2021-09-27
Title
Great Quotes <= 1.0.0 - Admin+ Stored Cross-Site Scripting
Slug
greek-multi-tool
Published
2025-03-27
Title
Greek Multi Tool – Fix peralinks, accents, auto create menus and more < 2.3.2 - Missing Authorization
Slug
greek-multi-tool
Published
2025-03-05
Title
Greek Multi Tool < 2.3.2 - Unauthenticated Stored XSS
Slug
greek-namedays-widget
Published
2025-01-16
Title
Greek Namedays Widget From Eortologio.Net <= 20191113 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
greeklish-permalink
Published
2023-06-19
Title
Greeklish-permalink < 3.5 - Unauthenticated Post Slug Update
Slug
green-money-payment-gateway
Published
2025-04-07
Title
GreenPay(tm) by Green.Money 3.0.0 - 3.0.9 - Unauthenticated Information Exposure
Slug
green-wp-telegram-bot-by-teplitsa
Published
2024-10-21
Title
TeploBot - Telegram Bot for WP <= 1.3 - Telegram Bot Token Disclosure
Slug
greencon
Published
2024-11-08
Title
GreenCon <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
greenhouse-job-board
Published
2025-12-21
Title
Greenhouse Job Board <= 2.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
greenshift-animation-and-page-builder-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
greenshift-animation-and-page-builder-blocks
Published
2022-12-23
Title
Greenshift – animation and page builder blocks < 4.8.9 - Contributor+ Stored XSS via Shortcode
Slug
greenshift-animation-and-page-builder-blocks
Published
2023-01-27
Title
Greenshift < 5.0 - Contributor+ Stored XSS
Slug
greenshift-animation-and-page-builder-blocks
Published
2023-03-27
Title
Greenshift < 5.0.0 - Author+ Stored XSS
Slug
greenshift-animation-and-page-builder-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
greenshift-animation-and-page-builder-blocks
Published
2023-12-12
Title
Greenshift – animation and page builder blocks < 7.6.3 - Authenticated (Administrator+) Arbitrary File Upload
Slug
greenshift-animation-and-page-builder-blocks
Published
2024-06-17
Title
Greenshift – animation and page builder blocks < 8.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
greenshift-animation-and-page-builder-blocks
Published
2024-09-16
Title
Greenshift – animation and page builder blocks < 9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
greenshift-animation-and-page-builder-blocks
Published
2024-10-24
Title
Greenshift – animation and page builder blocks <=9.7 - Missing Authorization