WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
g-auto-hyperlink
Published
2021-10-07
Title
G Auto-Hyperlink <= 1.0.1 - Admin+ SQL Injection
Slug
g-lock-double-opt-in-manager
Published
2014-08-01
Title
G-Lock Double Opt-in Manager - Two Security Bypass Vulnerabilities
Slug
g-web-shop
Published
2014-08-01
Title
Zingiri Web Shop <= 2.2.3 - ajax_file_cut.php selectedDoc Parameter Remote PHP Code
Slug
ga-backend-tracking
Published
2019-06-18
Title
GA Backend Tracking <= 1.2 - XSS
Slug
ga-for-wp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ga-for-wp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ga-universal
Published
2014-08-01
Title
GA Universal 1.0 - Setting Manipulation CSRF
Slug
galleria
Published
2023-06-16
Title
Galleria <= 1.0.3 - Cross-Site Request Forgery
Slug
gallery-album
Published
2017-09-22
Title
Gallery < 1.2.1 - Admin+ SQLi
Slug
gallery-album
Published
2022-06-13
Title
Gallery < 2.0.0 - Reflected Cross-Site Scripting
Slug
gallery-album
Published
2023-02-06
Title
Responsive Image Gallery, Gallery Album < 2.0.2 - Reflected XSS
Slug
gallery-album
Published
2023-10-11
Title
Responsive Image Gallery, Gallery Album <= 2.0.3 - Missing Authorization via Multiple AJAX Actions
Slug
gallery-album
Published
2023-10-16
Title
Responsive Image Gallery, Gallery Album <= 2.0.3 - Arbitrary Settings Update via CSRF
Slug
gallery-album
Published
2023-10-18
Title
Responsive Image Gallery, Gallery Album <= 2.0.3 - Unauthenticated Stored XSS
Slug
gallery-album
Published
2024-03-29
Title
Responsive Image Gallery, Gallery Album <= 2.0.3 - Reflected Cross-Site Scripting
Slug
gallery-album
Published
2024-03-29
Title
Responsive Image Gallery, Gallery Album <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gallery-bank
Published
2014-08-01
Title
Gallery Bank 2.0.19 - edit-album.php album_id Parameter Reflected XSS
Slug
gallery-bank
Published
2014-08-01
Title
Gallery Bank 2.0.19 - Multiple Unspecified Issues
Slug
gallery-bank
Published
2014-08-01
Title
Gallery Bank 2.0.19 - album-gallery-bank-class.php recordsArray Parameter Reflected XSS
Slug
gallery-bank
Published
2014-10-18
Title
Gallery Bank 2.0.26-3.0.69 - Reflected Cross-Site Scripting (XSS)
Slug
gallery-bank
Published
2014-11-25
Title
Gallery Bank <= 3.0.60 - Shell Upload
Slug
gallery-bank
Published
2015-02-21
Title
Gallery Bank <= 3.0.101 - SQL Injection
Slug
gallery-bank
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
gallery-bank
Published
2015-08-21
Title
Gallery Bank < 3.0.330 - Authenticated Blind SQL Injection
Slug
gallery-bank
Published
2022-06-08
Title
Gallery Bank <= 4.0.50 - Author+ Stored XSS via Gallery Description