WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gift-hunt
Published
2025-12-24
Title
Gift Hunt <= 2.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
gift-message-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
gift-message-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
gift-message-for-woocommerce
Published
2025-03-27
Title
Gift Message for WooCommerce < 1.7.9 - Cross-Site Request Forgery
Slug
gift-up
Published
2023-11-03
Title
Gift Up Gift Cards for WordPress and WooCommerce < 2.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
gift-up
Published
2023-12-04
Title
Gift Up < 2.22 - Settings Update via CSRF
Slug
gift-up
Published
2026-02-25
Title
Gift Up Gift Cards for WordPress and WooCommerce < 3.1.8 - Unauthenticated Server-Side Request Forgery
Slug
gift-voucher
Published
2018-08-26
Title
Gift Voucher < 4.1.8 - Unauthenticated Blind SQL Injection
Slug
gift-voucher
Published
2023-03-22
Title
Gift Voucher < 4.3.3 - Subscriber+ SQLi
Slug
gift-voucher
Published
2024-04-12
Title
Gift Vouchers < 4.4.1 - Cross-Site Request Forgery
Slug
gift-voucher
Published
2024-10-30
Title
Gift Cards < 4.4.5 - Author+ Stored Cross-Site Scripting via SVG File Upload
Slug
gift-voucher
Published
2025-02-19
Title
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) < 4.5.0 - Missing Authorization to Unauthenticated Price, Date, and Note Updates
Slug
gift-voucher
Published
2026-07-08
Title
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) < 4.7.1 - Unauthenticated Stored Cross-Site Scripting
Slug
gift-voucher
Published
2026-07-08
Title
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) < 4.7.0 - Missing Authorization
Slug
gift4u-gift-cards-all-in-one-for-woo
Published
2026-06-17
Title
GIFT4U – Gift Cards All in One for Woo < 1.1.0 - Unauthenticated SQL Injection
Slug
gift4u-gift-cards-all-in-one-for-woo
Published
2026-06-26
Title
GIFT4U – Gift Cards All in One for Woo < 1.1.0 - Missing Authorization
Slug
gift4u-gift-cards-all-in-one-for-woo
Published
2026-10-08
Title
GIFT4U – Gift Cards All in One for Woo < 1.1.4 - Missing Authorization
Slug
giftware
Published
2026-05-20
Title
Gift Cards For WooCommerce Pro < 4.2.7 - Unauthenticated Arbitrary File Upload
Slug
giftware
Published
2026-08-10
Title
Gift Cards For WooCommerce Pro < 4.2.10 - Unauthenticated Arbitrary File Upload
Slug
giga-messenger-bots
Published
2025-01-14
Title
Giga Messenger Bots <= 2.3.1 - Reflected XSS
Slug
gigpress
Published
2014-08-01
Title
GigPress 2.1.10 - Stored Cross-Site Scripting (XSS)
Slug
gigpress
Published
2015-05-25
Title
GigPress <= 2.3.8 - Authenticated SQL Injection
Slug
gigpress
Published
2015-08-24
Title
GigPress <= 2.3.10 - Authenticated XSS & Blind SQLi
Slug
gigpress
Published
2023-01-18
Title
GigPress < 2.3.28 - Contributor+ Stored XSS via Shortcode
Slug
gigpress
Published
2023-02-06
Title
GigPress <= 2.3.28 - Subscriber+ SQLi