WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gravityforms
Published
2026-05-01
Title
Gravity Forms < 2.9.31 - Unauthenticated Stored Cross-Site Scripting via Consent Field Hidden Input
Slug
gravityforms
Published
2026-05-01
Title
Gravity Forms < 2.10.1 - Unauthenticated Stored Cross-Site Scripting via Calculation Product Field in Repeater
Slug
gravityforms
Published
2026-05-01
Title
Gravity Forms < 2.10.1 - Unauthenticated Stored Cross-Site Scripting via Product Option
Slug
gravityforms
Published
2026-05-01
Title
Gravity Forms < 2.10.1 - Unauthenticated Stored Cross-Site Scripting via Hidden Product Field in Repeater
Slug
gravityforms
Published
2026-05-01
Title
Gravity Forms < 2.10.1 - Unauthenticated Stored Cross-Site Scripting via Single Product Field Inside Repeater
Slug
gravityforms
Published
2026-06-01
Title
Gravity Forms < 2.10.1 - Unauthenticated Arbitrary File Deletion
Slug
gravityforms
Published
2026-07-15
Title
Gravity Forms < 2.10.5 - Unauthenticated Arbitrary File Read via 'gform_uploaded_files' Parameter
Slug
gravityforms
Published
2026-09-01
Title
Gravity Forms < 3.0.3 - Unauthenticated Arbitrary File Upload via State/Chunk Hash Confusion
Slug
gravityforms
Published
2026-09-04
Title
Gravity Forms < 3.0.0 - Unauthenticated Stored Cross-Site Scripting via Post Body Field Value
Slug
gravityforms
Published
2026-09-18
Title
Gravity Forms < 3.1.1 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field
Slug
gravityforms
Published
2026-10-14
Title
Gravity Forms < 3.1.1 - Unauthenticated PHP Object Injection
Slug
gravityforms
Published
2026-10-29
Title
Gravity Forms < 3.1.3 - Unauthenticated Stored Cross-Site Scripting via List Field
Slug
gravityforms
Published
2026-10-29
Title
Gravity Forms < 3.1.3 - Unauthenticated PHP Object Injection via Post Custom Field
Slug
gravityforms
Published
2026-10-29
Title
Gravity Forms < 3.1.2 - Unauthenticated Stored Cross-Site Scripting via Post Excerpt / Post Custom Field / Rich-Text Paragraph Field Values
Slug
gravityformswebhooks
Published
2025-04-30
Title
Gravity Forms WebHooks < 1.7.0 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
Slug
gravitysmtp
Published
2026-03-30
Title
Gravity SMTP < 2.1.5 - Unauthenticated Sensitive Information Exposure via REST API
Slug
gravitysmtp
Published
2026-04-09
Title
Gravity SMTP < 2.1.5 - Subscriber+ Plugin Uninstall
Slug
gravityview
Published
2026-06-26
Title
GravityView < 3.0.1 - Unauthenticated Insecure Direct Object Reference
Slug
gravitywp-merge-tags
Published
2025-08-08
Title
GravityWP - Merge Tags < 1.4.5 - Unauthenticated Local File Inclusion
Slug
great-quotes
Published
2021-09-27
Title
Great Quotes <= 1.0.0 - Admin+ Stored Cross-Site Scripting
Slug
greek-multi-tool
Published
2025-03-27
Title
Greek Multi Tool – Fix peralinks, accents, auto create menus and more < 2.3.2 - Missing Authorization
Slug
greek-multi-tool
Published
2025-03-05
Title
Greek Multi Tool < 2.3.2 - Unauthenticated Stored XSS
Slug
greek-namedays-widget
Published
2025-01-16
Title
Greek Namedays Widget From Eortologio.Net <= 20191113 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
greeklish-permalink
Published
2023-06-19
Title
Greeklish-permalink < 3.5 - Unauthenticated Post Slug Update
Slug
green-money-payment-gateway
Published
2025-04-07
Title
GreenPay(tm) by Green.Money 3.0.0 - 3.0.9 - Unauthenticated Information Exposure