WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
giveasap
Published
2023-03-20
Title
Simple Giveaways < 2.45.1 - Admin+ Stored XSS
Slug
giveasap
Published
2023-03-20
Title
Simple Giveaways < 2.45.1 - Admin+ Stored Cross-Site Scripting
Slug
giveasap
Published
2023-03-20
Title
Simple Giveaways < 2.45.1 - Editor+ Stored Cross-Site Scripting
Slug
giveasap
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
giveasap
Published
2023-11-09
Title
Simple Giveaways < 2.46.1 - CSRF
Slug
giveasap
Published
2025-03-27
Title
Simple Giveaways < 2.48.2 - Authenticated (Contributor+) SQL Injection
Slug
giveasap
Published
2025-05-07
Title
Simple Giveaways <= 2.48.2 - Cross-Site Request Forgery
Slug
giveaway
Published
2021-07-20
Title
Giveaway <= 1.2.2 - Authenticated SQL Injection
Slug
giveaway-boost
Published
2024-10-17
Title
Giveaway Boost <= 2.1.4 - Unauthenticated PHP Object Injection
Slug
giveaways-contests-by-promosimple
Published
2025-01-16
Title
Giveaways and Contests by PromoSimple <= 1.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
giveaways-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
giveaways-for-woocommerce
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
gixaw-chat
Published
2024-08-22
Title
Gixaw Chat <= 1.0 - Stored XSS via CSRF
Slug
glance-that
Published
2025-02-13
Title
Glance That <= 4.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
glass
Published
2021-06-21
Title
Glass <= 1.3.2 - CSRF to Stored Cross-Site Scripting (XSS)
Slug
glasses-for-woocommerce
Published
2025-01-16
Title
ChatGPT Open AI Images & Content for WooCommerce <= 2.2.0 - Reflected Cross-Site Scipting
Slug
global-body-mass-index-calculator
Published
2026-06-08
Title
Global Body Mass Index Calculator <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
global-content-blocks
Published
2014-08-01
Title
Global Content Blocks <= 1.2 - SQL Injection
Slug
global-content-blocks
Published
2017-03-01
Title
Global Content Blocks - Cross-Site Request Forgery (CSRF)
Slug
global-dns
Published
2025-08-23
Title
Global DNS < 3.1.1 - Unauthenticated Remote Code Execution
Slug
global-elementor-buttons
Published
2024-04-04
Title
Global Elementor Buttons <= 1.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via button link
Slug
global-flash-galleries
Published
2014-08-01
Title
Global Flash Galleries - popup.php id Parameter SQL Injection
Slug
global-flash-galleries
Published
2014-08-01
Title
Global Flash Galleries - swfupload.php Unauthenticated Image Upload Weakness
Slug
global-gallery
Published
2025-02-11
Title
Global Gallery - WordPress Responsive Gallery < 9.1.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
global-gallery
Published
2025-04-07
Title
Global Gallery <= 8.8.0 - Reflected Cross-Site Scripting