WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gmap-venturit
Published
2025-08-11
Title
GMap - Venturit <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'h' Parameter
Slug
gmaper-elementor
Published
2025-12-31
Title
Gmaper for Elementor <= 1.0.9 - Missing Authorization
Slug
gmaps-for-visual-composer-free
Published
2025-01-16
Title
GMAPS for WPBakery Page Builder Free <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gmapsmania
Published
2025-05-01
Title
GmapsMania <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
gmb-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
gmo-font-agent
Published
2025-03-24
Title
GMO Font Agent <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gmo-social-connection
Published
2024-11-01
Title
GMO Social Connection <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
gmw-premium-settings
Published
2024-10-31
Title
GEO My WordPress < 4.5 - Admin+ Arbitrary File Upload
Slug
gn-publisher
Published
2023-02-27
Title
GN Publisher < 1.5.6 - Reflected XSS
Slug
gn-xml-sitemap
Published
2025-08-25
Title
Google XML News Sitemap plugin <= 0.02 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
gna-search-shortcode
Published
2025-04-24
Title
GNA Search Shortcode <= 0.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gntt-post-title-ticker
Published
2026-05-26
Title
GNTT Post Title Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
gnu-mailman-integration
Published
2021-09-09
Title
GNU-Mailman Integration <= 1.0.6 - Reflected Cross-Site Scripting
Slug
gnucommerce
Published
2016-04-26
Title
Gnucommerce < 0.5.7-beta - XSS
Slug
gnucommerce
Published
2017-03-01
Title
Gnucommerce < 1.4.2 - XSS
Slug
gnucommerce
Published
2025-03-11
Title
GNUCommerce <= 1.5.4 - Reflected Cross-Site Scripting
Slug
gnucommerce
Published
2025-04-02
Title
GNUCommerce <= 1.5.4 - Unauthenticated PHP Object Injection
Slug
gnupress
Published
2025-03-11
Title
GNUPress <= 0.2.9 - Reflected Cross-Site Scripting
Slug
go-dash
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
go-fetch-jobs-jobengine
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
go-fetch-jobs-jobengine
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
go-fetch-jobs-wp-job-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
go-fetch-jobs-wp-job-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
go-fetch-jobs-wp-job-manager
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
go-night-pro
Published
2026-03-20
Title
Go Night Pro | WordPress Dark Mode Plugin <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'margin' Shortcode Attribute