WordPress Plugin Vulnerabilities | Page 36 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

grid-shortcodes

Published

2024-03-25

Title

Grid Shortcodes < 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

grid-view-gallery

Published

2024-11-20

Title

Grid View Gallery <= 1.0 - Authenticated (Editor+) PHP Object Injection

Slug

grider-elementor

Published

2025-12-11

Title

Grider for Elementor <= 1.0.8 - Missing Authorization

Slug

groovy-menu-free

Published

2025-09-26

Title

Groovy Menu <= 1.4.3 - Cross-Site Request Forgery

Slug

grou-random-image-widget

Published

2014-08-01

Title

grou-r&om-image-widget - Full Path Disclosure

Slug

Published

2019-04-08

Title

Groundhogg < 1.3.5 - Remote Code Execution

Slug

Published

2019-10-23

Title

Groundhogg < 1.3.11.8 - Authenticated SQL Injection

Slug

Published

2019-10-23

Title

Groundhogg < 2.0.9.11 - Authenticated Reflected XSS

Slug

Published

2023-03-20

Title

Groundhogg Contacts < 2.7.9.4 - Admin+ SQLi

Slug

Published

2023-05-19

Title

Groundhogg < 2.7.10 - Disable All Plugins via CSRF

Slug

Published

2023-05-19

Title

Groundhogg < 2.7.10 - Contributor+ Stored XSS

Slug

Published

2023-05-19

Title

Groundhogg < 2.7.10 - Ticket Creation via CSRF

Slug

Published

2023-05-19

Title

Groundhogg < 2.7.10 - Privilege Escalation via CSRF

Slug

Published

2023-05-19

Title

Groundhogg < 2.7.10 - Lack of Authorization for Non-Arbitrary File upload

Slug

Published

2023-10-25

Title

Groundhogg < 2.7.11.11 - Admin+ Stored XSS

Slug

Published

2023-05-30

Title

Groundhogg < 2.7.11.1 - CSRF

Slug

Published

2023-05-30

Title

Groundhogg < 2.7.11.1 - Admin+ SQLi

Slug

Published

2024-06-21

Title

Groundhogg < 3.4.3 - Cross-Site Request Forgery

Slug

Published

2024-06-27

Title

Groundhogg < 3.4.3 - Reflected Cross-Site Scripting

Slug

Published

2025-01-03

Title

Groundhogg < 3.7.3.4 - Reflected Cross-Site Scripting

Slug

Published

2025-01-13

Title

Groundhogg < 3.7.3.6 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function

Slug

Published

2025-03-31

Title

Groundhogg < 4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via label Parameter

Slug

Published

2025-05-08

Title

WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg < 4.1.2 - Authenticated (Administrator+) Arbitrary File Deletion

Slug

Published

2025-07-04

Title

Groundhogg < 4.2.2 - Authenticated (Sales Rep+) Arbitrary File Upload

Slug

Published

2025-08-05

Title

Groundhogg < 4.2.2.1 - Authenticated (Sales Representative+) PHP Object Injection