WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
grid-kit-premium
Published
2022-10-18
Title
Grid Kit Premium < 2.1.2 - Reflected Cross-Site Scripting
Slug
grid-kit-premium
Published
2022-10-25
Title
Grid Kit Premium < 2.1.2 - Reflected Cross-Site Scripting
Slug
grid-kit-premium
Published
2023-07-10
Title
Grid Kit Premium < 2.2.0 - Multiple Reflected Cross-Site Scripting
Slug
grid-plus
Published
2023-10-29
Title
Grid Plus < 1.3.3 - Subscriber+ Grid Layout Creation/Deletion/Update
Slug
grid-plus
Published
2023-10-29
Title
Grid Plus < 1.3.4 - Subscriber+ Local File Inclusion
Slug
grid-plus
Published
2023-10-19
Title
Grid Plus < 1.3.5 - Reflected XSS
Slug
grid-plus
Published
2024-12-11
Title
Grid Plus – Unlimited grid layout <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via grid_plus_load_by_category
Slug
grid-plus
Published
2025-09-13
Title
Grid Plus <= 3.3 - Reflected Cross-Site Scripting
Slug
grid-shortcodes
Published
2024-02-26
Title
Grid Shortcodes < 1.1.1 - Contributor+ Stored XSS
Slug
grid-shortcodes
Published
2024-03-25
Title
Grid Shortcodes < 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
grid-view-gallery
Published
2024-11-20
Title
Grid View Gallery <= 1.0 - Authenticated (Editor+) PHP Object Injection
Slug
grider-elementor
Published
2025-12-11
Title
Grider for Elementor <= 1.0.8 - Missing Authorization
Slug
groovy-menu-free
Published
2025-09-26
Title
Groovy Menu <= 1.4.3 - Cross-Site Request Forgery
Slug
grou-random-image-widget
Published
2014-08-01
Title
grou-r&om-image-widget - Full Path Disclosure
Slug
groundhogg
Published
2019-04-08
Title
Groundhogg < 1.3.5 - Remote Code Execution
Slug
groundhogg
Published
2019-10-23
Title
Groundhogg < 1.3.11.8 - Authenticated SQL Injection
Slug
groundhogg
Published
2019-10-23
Title
Groundhogg < 2.0.9.11 - Authenticated Reflected XSS
Slug
groundhogg
Published
2023-03-20
Title
Groundhogg Contacts < 2.7.9.4 - Admin+ SQLi
Slug
groundhogg
Published
2023-05-19
Title
Groundhogg < 2.7.10 - Disable All Plugins via CSRF
Slug
groundhogg
Published
2023-05-19
Title
Groundhogg < 2.7.10 - Contributor+ Stored XSS
Slug
groundhogg
Published
2023-05-19
Title
Groundhogg < 2.7.10 - Ticket Creation via CSRF
Slug
groundhogg
Published
2023-05-19
Title
Groundhogg < 2.7.10 - Privilege Escalation via CSRF
Slug
groundhogg
Published
2023-05-19
Title
Groundhogg < 2.7.10 - Lack of Authorization for Non-Arbitrary File upload
Slug
groundhogg
Published
2023-10-25
Title
Groundhogg < 2.7.11.11 - Admin+ Stored XSS
Slug
groundhogg
Published
2023-05-30
Title
Groundhogg < 2.7.11.1 - CSRF