WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gg-woo-feed
Published
2023-12-15
Title
GTG Product Feed for Shopping < 1.2.5 - Unauthenticated Settings Update
Slug
gg-woo-feed
Published
2024-04-15
Title
GG Woo Feed for WooCommerce Shopping Feed < 1.2.7 - Missing Authorization
Slug
ghactivity
Published
2024-08-26
Title
GHActivity <= 2.0.0-alpha - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ghl-wizard
Published
2025-09-22
Title
LC Wizard <= 2.1.3 - Contributor+ Stored XSS
Slug
ghl-wizard
Published
2025-11-06
Title
LC Wizard 1.2.10 - 1.3.0 - Missing Authorization to Unauthenticated Privilege Escalation
Slug
ghl-wizard
Published
2026-02-05
Title
LC Wizard < 2.1.2 - Missing Authorization to Unauthenticated Settings Update
Slug
ghost
Published
2016-05-02
Title
Ghost Plugin <= 0.5.5 - Unrestricted Export Download
Slug
ghost
Published
2024-05-07
Title
Ghost < 1.5.0 - Unauthenticated Sensitive Information Exposure
Slug
ghostkit
Published
2025-07-16
Title
Ghost Kit < 3.4.2 - Unauthenticated Local File Inclusion
Slug
ghostkit
Published
2025-09-17
Title
Ghost Kit < 3.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gi-media-library
Published
2015-01-15
Title
GI-Media Library < 3.0 - Arbitrary File Download
Slug
gianism
Published
2024-05-08
Title
Gianism < 5.2.1 - Admin+ Stored XSS
Slug
gianism
Published
2025-09-22
Title
Gianism <= 5.2.2 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
gift-cards-for-woocommerce-pro
Published
2025-01-07
Title
Ultimate Gift Cards for WooCommerce <= 3.0.6 - Missing Authorization to Infinite Money Glitch
Slug
gift-certificate-creator
Published
2017-06-11
Title
Gift Certificate Creator <= 1.0 - Stored XSS
Slug
gift-certificate-creator
Published
2025-04-01
Title
Gift Certificate Creator <= 1.1.0 - Reflected Cross-Site Scripting via receip_address Parameter
Slug
gift-hunt
Published
2025-12-24
Title
Gift Hunt <= 2.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
gift-message-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
gift-message-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
gift-message-for-woocommerce
Published
2025-03-27
Title
Gift Message for WooCommerce < 1.7.9 - Cross-Site Request Forgery
Slug
gift-up
Published
2023-11-03
Title
Gift Up Gift Cards for WordPress and WooCommerce < 2.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
gift-up
Published
2023-12-04
Title
Gift Up < 2.22 - Settings Update via CSRF
Slug
gift-voucher
Published
2018-08-26
Title
Gift Voucher < 4.1.8 - Unauthenticated Blind SQL Injection
Slug
gift-voucher
Published
2023-03-22
Title
Gift Voucher < 4.3.3 - Subscriber+ SQLi
Slug
gift-voucher
Published
2024-04-12
Title
Gift Vouchers < 4.4.1 - Cross-Site Request Forgery