WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gf-salesmate-add-on
Published
2025-03-31
Title
Salesmate Add-On for Gravity Forms < 2.0.4 - Unauthenticated SQL Injection
Slug
gf-zendesk
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-zendesk
Published
2025-05-07
Title
WP Gravity Forms Zendesk < 1.1.3 - Open Redirect
Slug
gf-zoho
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
gf-zoho
Published
2025-10-21
Title
WP Gravity Forms Zoho CRM and Bigin < 1.2.9 - Open Redirect
Slug
gf-zoho
Published
2025-08-08
Title
Gravity Forms Zoho CRM and Bigin < 1.3.0 - Unauthenticated PHP Object Injection
Slug
gf2pdf
Published
2025-03-23
Title
Gravity 2 PDF <= 3.1.3 - Reflected Cross-Site Scripting
Slug
gfirem-action-after
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
gfirem-action-after
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
gfirem-advance-search
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
gfirem-advance-search
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
gfirem-advance-search
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
gfirem-fields
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
gfirem-fields
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
gfirem-fields
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
gg-bought-together
Published
2025-06-24
Title
GG Bought Together for WooCommerce <= 1.0.2 - Unauthenticated SQL Injection
Slug
gg-woo-feed
Published
2023-12-15
Title
GTG Product Feed for Shopping < 1.2.5 - Unauthenticated Settings Update
Slug
gg-woo-feed
Published
2024-04-15
Title
GG Woo Feed for WooCommerce Shopping Feed < 1.2.7 - Missing Authorization
Slug
ghactivity
Published
2024-08-26
Title
GHActivity <= 2.0.0-alpha - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ghl-wizard
Published
2025-09-22
Title
LC Wizard <= 2.1.1 - Contributor+ Stored XSS
Slug
ghl-wizard
Published
2025-11-06
Title
LC Wizard 1.2.10 - 1.3.0 - Missing Authorization to Unauthenticated Privilege Escalation
Slug
ghost
Published
2016-05-02
Title
Ghost Plugin <= 0.5.5 - Unrestricted Export Download
Slug
ghost
Published
2024-05-07
Title
Ghost < 1.5.0 - Unauthenticated Sensitive Information Exposure
Slug
ghostkit
Published
2025-07-16
Title
Ghost Kit < 3.4.2 - Unauthenticated Local File Inclusion
Slug
ghostkit
Published
2025-09-17
Title
Ghost Kit < 3.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting