WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
global-translator
Published
2025-06-05
Title
Global Translator <= 2.0.2 - Cross-Site Request Forgery
Slug
globalquran
Published
2025-02-03
Title
GlobalQuran <= 1.0 - Cross-Site Request Forgery to Settings Update
Slug
globe-gateway-e4
Published
2024-11-11
Title
Global Gateway e4 | Payeezy Gateway | <= 2.0 - Unauthenticated Arbitrary File Deletion
Slug
glofox-shortcodes
Published
2025-01-16
Title
Glofox Shortcodes <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
glomex-oembed
Published
2024-12-13
Title
glomex oEmbed < 0.9.2 - Contributor+ Stored XSS
Slug
gloria-admin-panel
Published
2026-10-06
Title
Gloria Admin Panel <= 1.3 - Reflected Cross-Site Scripting
Slug
gloria-assistant-by-webtronic-labs
Published
2025-03-04
Title
I Am Gloria <= 1.1.4 - Cross-Site Request Forgery
Slug
glorious-services-support
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
glorious-services-support
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
glorious-sites-installer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
glorious-sites-installer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
glossary-by-codeat
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
glossary-by-codeat
Published
2023-01-27
Title
Glossary < 2.1.28 - Contributor+ Stored XSS
Slug
glossary-by-codeat
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
glossary-by-codeat
Published
2024-07-15
Title
Glossary < 2.2.27 - Unauthenticated Full Path Disclosure
Slug
glossary-by-codeat
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
glossy
Published
2025-01-14
Title
Glossy <= 2.3.5 - Reflected XSS
Slug
gls-shipping-for-woocommerce
Published
2025-12-29
Title
GLS Shipping for WooCommerce < 1.4.1 - Reflected Cross-Site Scripting
Slug
gls-shipping-for-woocommerce
Published
2026-05-13
Title
GLS Shipping for WooCommerce < 1.4.1 - Reflected Cross-Site Scripting via 'failed_orders'
Slug
gm-woo-product-list-widget
Published
2022-12-08
Title
Product list Widget for Woocommerce <= 1.0 - Reflected XSS
Slug
gm-woocommerce-quote-popup
Published
2023-11-07
Title
Product Enquiry for WooCommerce < 3.1 - Unauthenticated Stored XSS
Slug
gm-woocommerce-quote-popup
Published
2023-11-07
Title
Product Enquiry for WooCommerce < 3.2 - Reflected XSS
Slug
gm-woocommerce-quote-popup
Published
2023-12-04
Title
Product Enquiry for WooCommerce < 3.1 - Cross-Site Request Forgery
Slug
gm-woocommerce-quote-popup
Published
2023-12-28
Title
Product Enquiry for WooCommerce < 3.1 - Admin+ Stored XSS
Slug
gm-woocommerce-quote-popup
Published
2023-12-28
Title
Product Enquiry for WooCommerce < 3.1 - Arbitrary Enquiry Deletion via CSRF