WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
greenshift-animation-and-page-builder-blocks
Published
2026-04-10
Title
Greenshift < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute
Slug
greenshift-animation-and-page-builder-blocks
Published
2026-08-21
Title
Greenshift < 12.9.0 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings'
Slug
greenshift-animation-and-page-builder-blocks
Published
2026-08-25
Title
Greenshift < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI
Slug
greenshift-animation-and-page-builder-blocks
Published
2026-09-03
Title
Greenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST Endpoint
Slug
greenshift-animation-and-page-builder-blocks
Published
2026-09-03
Title
Greenshift < 13.2.0 - Contributor+ Stored XSS via Block Animation customProps Attribute
Slug
greenshift-animation-and-page-builder-blocks
Published
2026-10-01
Title
Greenshift < 13.2.1 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder
Slug
greenshift-animation-and-page-builder-blocks
Published
2026-10-28
Title
Greenshift < 13.2.2 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText
Slug
greenshift-animation-and-page-builder-blocks
Published
2026-10-28
Title
Greenshift < 13.2.2 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block
Slug
greenshiftquery
Published
2024-08-26
Title
Greenshift Query and Meta Addon < 3.9.2 - Authenticated (Subscriber+) SQL Injection
Slug
greenshiftwoo
Published
2024-08-26
Title
Woocommerce Addon by Greenshift< 1.9.8 - Authenticated (Subscriber+) SQL Injection
Slug
greenwallet-gateway
Published
2022-05-11
Title
WooCommerce Green Wallet Gateway < 1.0.2 - Reflected Cross Site Scripting in checkout page
Slug
gregs-high-performance-seo
Published
2015-01-10
Title
Greg's High Performance SEO 1.6.1 - Reflected XSS
Slug
grey-owl-lightbox
Published
2024-11-20
Title
Grey Owl Lightbox <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
grid
Published
2025-09-22
Title
Grid < 2.3.2 - Cross-Site Request Forgery
Slug
grid-accordion-lite
Published
2025-01-10
Title
Grid Accordion Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
grid-kit-premium
Published
2022-10-18
Title
Grid Kit Premium < 2.1.2 - Reflected Cross-Site Scripting
Slug
grid-kit-premium
Published
2022-10-25
Title
Grid Kit Premium < 2.1.2 - Reflected Cross-Site Scripting
Slug
grid-kit-premium
Published
2023-07-10
Title
Grid Kit Premium < 2.2.0 - Multiple Reflected Cross-Site Scripting
Slug
grid-plus
Published
2023-10-29
Title
Grid Plus < 1.3.3 - Subscriber+ Grid Layout Creation/Deletion/Update
Slug
grid-plus
Published
2023-10-29
Title
Grid Plus < 1.3.4 - Subscriber+ Local File Inclusion
Slug
grid-plus
Published
2023-10-19
Title
Grid Plus < 1.3.5 - Reflected XSS
Slug
grid-plus
Published
2024-12-11
Title
Grid Plus – Unlimited grid layout <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via grid_plus_load_by_category
Slug
grid-plus
Published
2025-09-13
Title
Grid Plus <= 3.3 - Reflected Cross-Site Scripting
Slug
grid-shortcodes
Published
2024-02-26
Title
Grid Shortcodes < 1.1.1 - Contributor+ Stored XSS
Slug
grid-shortcodes
Published
2024-03-25
Title
Grid Shortcodes < 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting