WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
g-auto-hyperlink
Published
2021-10-07
Title
G Auto-Hyperlink <= 1.0.1 - Admin+ SQL Injection
Slug
g-business-reviews-rating
Published
2024-05-24
Title
Reviews and Rating – Google Reviews < 5.3 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
g-ffl-cockpit
Published
2025-12-05
Title
g-FFL Cockpit < 1.8.0 - Missing Authorization to Unauthenticated Information Exposure
Slug
g-ffl-cockpit
Published
2025-12-05
Title
g-FFL Cockpit < 1.8.0 - Unauthenticated Product Deletion
Slug
g-lock-double-opt-in-manager
Published
2014-08-01
Title
G-Lock Double Opt-in Manager - Two Security Bypass Vulnerabilities
Slug
g-meta-keywords
Published
2024-10-15
Title
G Meta Keywords <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
g-web-shop
Published
2014-08-01
Title
Zingiri Web Shop <= 2.2.3 - ajax_file_cut.php selectedDoc Parameter Remote PHP Code
Slug
g5plus-auteur
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
g5plus-auteur
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates
Slug
g5plus-auteur
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload
Slug
gAppointments
Published
2023-08-21
Title
Appointment booking addon for Gravity Forms < 1.10.0 - Reflected Cross-Site Scripting
Slug
gAppointments
Published
2023-10-31
Title
Appointment booking addon for Gravity Forms <= 1.9.5.1 - Admin+ Stored XSS
Slug
gAppointments
Published
2025-07-11
Title
gAppointments <= 1.14.1 - Reflected Cross-Site Scripting
Slug
ga-backend-tracking
Published
2019-06-18
Title
GA Backend Tracking <= 1.2 - XSS
Slug
ga-for-wp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ga-for-wp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ga-germanized
Published
2025-11-28
Title
Analytics Germanized for Google Analytics < 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ga-universal
Published
2014-08-01
Title
GA Universal 1.0 - Setting Manipulation CSRF
Slug
galleria
Published
2023-06-16
Title
Galleria <= 1.0.3 - Cross-Site Request Forgery
Slug
gallerio
Published
2024-11-13
Title
Gallerio <= 1.01 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
gallerio
Published
2025-01-16
Title
Gallerio <= 1.0.1 - Reflected Cross-Site Scripting
Slug
gallery
Published
2025-02-14
Title
Gallery < 2.2.2 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
gallery-album
Published
2017-09-22
Title
Gallery < 1.2.1 - Admin+ SQLi
Slug
gallery-album
Published
2022-06-13
Title
Gallery < 2.0.0 - Reflected Cross-Site Scripting
Slug
gallery-album
Published
2023-02-06
Title
Responsive Image Gallery, Gallery Album < 2.0.2 - Reflected XSS