WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
groundhogg
Published
2025-10-31
Title
Groundhogg < 4.2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
groundhogg
Published
2025-11-20
Title
Groundhogg < 4.2.7 - Authenticated (Admin+) SQL Injection
Slug
group-category-creator
Published
2025-01-16
Title
Group category creator <= 1.3.0.3 - Reflected Cross-Site Scripting
Slug
groupdocs-comparison
Published
2014-08-01
Title
GroupDocs Comparison <= 1.0.2 - Multiple Parameter XSS
Slug
groupdocs-documents-annotation
Published
2014-08-01
Title
GroupDocs Document Annotation 1.3.8 - options.php Multiple Parameter XSS
Slug
groupdocs-documents-annotation
Published
2014-08-01
Title
GroupDocs Document Annotation 1.3.8 - grpdocs-dialog.php Multiple Parameter XSS
Slug
groupdocs-signature
Published
2014-08-01
Title
GroupDocs Signature 1.2.0 - grpdocs-dialog.php Multiple Parameter XSS
Slug
groupdocs-signature
Published
2014-08-01
Title
GroupDocs Signature 1.2.0 - options.php Multiple Parameter XSS
Slug
groupdocs-viewer
Published
2014-08-01
Title
GroupDocs Viewer 1.4.1 - options.php Multiple Parameter XSS
Slug
groupdocs-viewer
Published
2014-08-01
Title
GroupDocs Viewer 1.4.1 - grpdocs-dialog.php Multiple Parameter XSS
Slug
groups
Published
2014-08-01
Title
Groups 1.4.5 - Negated Role Capability H&ling Elevated Privilege Issue
Slug
groups
Published
2025-11-07
Title
Groups < 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Group Join
Slug
groups
Published
2026-02-18
Title
Groups < 3.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'groups_group_info' Shortcode
Slug
gs-behance-portfolio
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
gs-books-showcase
Published
2023-01-30
Title
GS Books Showcase < 1.3.1 - Contributor+ Stored XSS
Slug
gs-books-showcase
Published
2024-12-11
Title
WordPress Book Plugin for Displaying Books in Grid, Flip, Slider, Popup Layout and more < 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gs-coach
Published
2024-12-30
Title
GS Coaches < 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gs-dribbble-portfolio
Published
2024-12-30
Title
GS Shots for Dribbble < 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gs-envato-portfolio
Published
2023-01-30
Title
GS Portfolio for Envato < 1.4.0 - Contributor+ Stored XSS
Slug
gs-envato-portfolio
Published
2025-12-31
Title
GS Portfolio for Envato <= 1.4.2 - Missing Authorization
Slug
gs-facebook-comments
Published
2024-04-17
Title
WP Social Comments < 1.7.4 - Missing Authorization via wpfc_allow_comments()
Slug
gs-instagram-portfolio
Published
2023-02-03
Title
GS Insever Portfolio < 1.4.5 - Contributor+ Stored XSS
Slug
gs-instagram-portfolio
Published
2025-01-08
Title
GS Insever Portfolio <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) CSS Injection
Slug
gs-logo-slider
Published
2022-12-29
Title
GS Logo Slider < 3.3.8 - Contributor+ Stored XSS in Shortcode
Slug
gs-logo-slider
Published
2023-12-27
Title
GS Logo Slider < 3.5.2 - Cross-Site Request Forgery