WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gaxx-keywords
Published
2024-12-12
Title
Gaxx Keywords <= 0.2 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
gb-forms-db
Published
2025-07-10
Title
GB Forms DB < 1.0.3 - Unauthenticated Remote Code Execution
Slug
gb-gallery-slideshow
Published
2014-11-02
Title
GB Gallery Slideshow 1.5 - SQL Injection
Slug
gb-gallery-slideshow
Published
2025-04-01
Title
GB Gallery Slideshow <= 1.3 - Missing Authorization
Slug
gb-gallery-slideshow
Published
2025-04-10
Title
GB Gallery Slideshow <= 1.3 - Reflected Cross-Site Scripting
Slug
gbi-to-print
Published
2026-05-26
Title
GBI To Print <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'div' Shortcode Attribute
Slug
gboutique
Published
2020-03-24
Title
Multiple plugins - Unauthenticated Dompdf Local File Inclusion (LFI)
Slug
gboy-custom-google-map
Published
2024-11-08
Title
Gboy Custom Google Map <= 1.2 - Authenticated (Contributor+) SQL Injection
Slug
gc-social-wall
Published
2025-06-25
Title
GC Social wall <= 1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gc-testimonials
Published
2022-12-07
Title
GC Testimonials <= 1.3.2 - Contributor+ Stored XSS
Slug
gd-bbpress-attachments
Published
2015-07-09
Title
GD bbPress Attachments <= 2.2 - Local File Inclusion
Slug
gd-bbpress-attachments
Published
2015-07-09
Title
GD bbPress Attachments <= 2.2 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
gd-bbpress-attachments
Published
2018-05-14
Title
GD bbPress Attachments <= 2.5 - Authenticated Stored XSS
Slug
gd-bbpress-attachments
Published
2022-12-05
Title
GD bbPress Attachments < 4.4 - Admin+ Stored XSS
Slug
gd-bbpress-attachments
Published
2024-11-19
Title
GD bbPress Attachments < 4.7.3 - Reflected Cross-Site Scripting
Slug
gd-bbpress-tools
Published
2025-09-22
Title
GD bbPress Tools < 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gd-mail-queue
Published
2023-06-09
Title
GD Mail Queue < 4.0 - Unauthenticated Stored Cross-Site Scripting
Slug
gd-mail-queue
Published
2024-12-28
Title
GD Mail Queue < 4.4 - Reflected Cross-Site Scripting
Slug
gd-mylist
Published
2022-02-21
Title
GD Mylist <= 1.1.1 - Admin+ Stored Cross-Site Scripting
Slug
gd-rating-system
Published
2018-01-08
Title
GD Rating System 2.3 - Multiple Vulnerabilities
Slug
gd-rating-system
Published
2017-02-24
Title
GD Rating System < 2.1 - XSS
Slug
gd-rating-system
Published
2024-01-08
Title
GD Rating System < 3.5.1 - Unauthenticated Stored Cross-Site Scripting via IP
Slug
gd-rating-system
Published
2024-07-11
Title
GD Rating System < 3.6.1 - Authenticated (Contributor+) Local File Inclusion
Slug
gd-rating-system
Published
2024-11-19
Title
GD Rating System < 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class Parameter
Slug
gd-rating-system
Published
2026-04-29
Title
GD Rating System < 3.7 - Unauthenticated SQL Injection