WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-gotowebinar
Published
2024-07-10
Title
WP GoToWebinar < 15.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-gotowebinar
Published
2024-07-19
Title
WP GoToWebinar < 15.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-gpx-map
Published
2014-08-01
Title
wp-gpx-max version 1.1.21 - Arbitrary File Upload
Slug
wp-gpx-maps
Published
2023-09-29
Title
WP GPX Map < 1.7.06 - Missing Authorization
Slug
wp-gpx-maps
Published
2024-09-24
Title
WP GPX Maps <= 1.7.08 - Authenticated (Contributor+) Stored Cross-Site Scripting via sgpx Shortcode
Slug
wp-graphql
Published
2019-05-08
Title
WPGraphQL < 0.3.0 - Multiple Vulnerabilities
Slug
wp-graphql
Published
2021-04-27
Title
WPGraphQL < 1.3.6 - Denial of Service
Slug
wp-graphql
Published
2019-07-10
Title
WP-GraphQL < 0.3.5 - Improper Access Control
Slug
wp-graphql
Published
2023-06-26
Title
WPGraphQL < 1.14.6 - Editor+ SSRF
Slug
wp-graphql
Published
2026-03-24
Title
WPGraphQL < 2.10 - Missing Authorization
Slug
wp-graphql
Published
2026-04-21
Title
WPGraphQL < 2.11.1 - Unauthenticated SQL Injection
Slug
wp-graphql
Published
2026-05-07
Title
WPGraphQL < 2.5.4 - Cross-Site Request Forgery
Slug
wp-graphql-woocommerce
Published
2022-07-26
Title
WPGraphQL WooCommerce < 0.12.4 - Unauthenticated Coupon Codes Disclosure
Slug
wp-graphviz
Published
2025-09-05
Title
WP-GraphViz <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-gratify
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-gravity-forms-spreadsheets
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
wp-gravity-forms-spreadsheets
Published
2025-07-30
Title
Connector for Gravity Forms and Google Sheets < 1.2.5 - Open Redirect
Slug
wp-gravity-forms-spreadsheets
Published
2025-07-30
Title
Connector for Gravity Forms and Google Sheets < 1.2.5 - Cross-Site Request Forgery
Slug
wp-gravity-forms-spreadsheets
Published
2025-08-08
Title
Connector for Gravity Forms and Google Sheets < 1.2.7 - Unauthenticated PHP Object Injection
Slug
wp-greet
Published
2025-01-20
Title
wp-greet < 6.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-grid-builder
Published
2026-07-10
Title
WP Grid Builder < 2.3.4 - Authenticated (Subscriber+) Privilege Escalation via 'key' Parameter
Slug
wp-guestmap
Published
2014-06-12
Title
WP Guestmap <= 1.8 - Multiple XSS
Slug
wp-guppy
Published
2021-11-22
Title
WP Guppy < 1.3 - Sensitive Information Disclosure
Slug
wp-guppy
Published
2025-05-30
Title
WP Guppy <= 4.3.3 - Authenticated (Subscriber+) SQL Injection
Slug
wp-hallo-welt
Published
2025-12-19
Title
WP Hallo Welt <= 1.4. - Cross-Site Request Forgery to Stored Cross-Site Scripting