WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gnucommerce
Published
2016-04-26
Title
Gnucommerce < 0.5.7-beta - XSS
Slug
gnucommerce
Published
2017-03-01
Title
Gnucommerce < 1.4.2 - XSS
Slug
gnucommerce
Published
2025-03-11
Title
GNUCommerce <= 1.5.4 - Reflected Cross-Site Scripting
Slug
gnucommerce
Published
2025-04-02
Title
GNUCommerce <= 1.5.4 - Unauthenticated PHP Object Injection
Slug
gnupress
Published
2025-03-11
Title
GNUPress <= 0.2.9 - Reflected Cross-Site Scripting
Slug
go-dash
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
go-fetch-jobs-jobengine
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
go-fetch-jobs-jobengine
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
go-fetch-jobs-wp-job-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
go-fetch-jobs-wp-job-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
go-social
Published
2025-01-16
Title
go Social <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
go-sphinx
Published
2025-01-16
Title
Gigaom Sphinx <= 0.1 - Reflected Cross-Site Scripting
Slug
go-to-top
Published
2025-03-11
Title
Go To Top <= 0.0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
go-viral
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
go-viral
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
go_pricing
Published
2023-05-23
Title
Go Pricing - WordPress Responsive Pricing Tables < 3.4 - Contributor+ Stored XSS
Slug
go_pricing
Published
2023-05-23
Title
Go Pricing - WordPress Responsive Pricing Tables < 3.4 - Broken Access Control
Slug
go_pricing
Published
2023-05-23
Title
Go Pricing - WordPress Responsive Pricing Tables < 3.4 - Incorrect Authorization leading to Arbitrary File Upload
Slug
go_pricing
Published
2023-05-23
Title
Go Pricing - WordPress Responsive Pricing Tables < 3.4 - Contributor+ PHP Object Injection via shortcode
Slug
goal-tracker-for-patreon
Published
2025-08-25
Title
Goal Tracker for Patreon <= 0.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
goal-tracker-ga
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
goanimate
Published
2024-12-12
Title
Go Animate <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
goauth
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
goauth
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
gocache-cdn
Published
2025-10-17
Title
GoCache <= 1.3.6 - Missing Authorization