WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
golf-tracker
Published
2024-10-31
Title
Golf Tracker <= 0.7 - Authenticated (Contributor+) SQL Injection
Slug
golo-framework
Published
2026-07-02
Title
Golo Framework <= 1.7.3 - Authenticated (Contributor+) Local File Inclusion
Slug
golo-framework
Published
2026-08-19
Title
Golo Framework < 1.7.5 - Unauthenticated Local File Inclusion
Slug
good-bad-comments
Published
2022-03-28
Title
Good & Bad Comments <= 1.0.0 - Admin+ Stored Cross-Site Scripting
Slug
good-old-gallery
Published
2025-01-16
Title
Good Old Gallery <= 2.1.2 - Reflected Cross-Site Scripting
Slug
good-reviews-wp
Published
2024-02-02
Title
Five Star Restaurant Reviews < 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Review URL
Slug
good-url-preview-box
Published
2025-02-03
Title
URL-Preview-Box <= 1.20 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
goodbarber
Published
2023-10-06
Title
GoodBarber < 1.0.24 - Settings Update via CSRF
Slug
goodbarber
Published
2025-04-16
Title
GoodBarber < 1.0.27 - Open Redirect
Slug
goodbye-captcha
Published
2026-08-05
Title
WPBruiser {no- Captcha anti-Spam} <= 3.1.43 - Unauthenticated PHP Object Injection
Slug
goodlayers-blocks
Published
2025-01-16
Title
Goodlayers Blocks < 1.0.3 - Reflected Cross-Site Scripting
Slug
goodlayers-core
Published
2024-12-02
Title
Goodlayers Core < 2.0.8 - Reflected Cross-Site Scripting via 'font-family'
Slug
goodlayers-core
Published
2024-12-12
Title
Goodlayers Core < 2.0.10 - Contributor+ Stored XSS
Slug
goodlayers-core
Published
2025-01-09
Title
GoodLayers Core < 2.1.3 - Subscriber+ Stored XSS via SVG Upload
Slug
goodlayers-core
Published
2025-09-23
Title
Goodlayers Core < 2.1.7 - Authenticated (Contributor+) Privilege Escalation
Slug
goodlms
Published
2020-11-12
Title
Good LMS < 2.1.5 - Unauthenticated SQL Injection
Slug
goodmeet
Published
2026-07-09
Title
GoodMeet < 1.1.9 - Cross-Site Request Forgery to Google Meet Credential Reset via 'goodmeet_reset_google_meet_credential'
Slug
goods-catalog
Published
2023-09-04
Title
Goods Catalog <= 2.4.1 - Contributor+ Stored XSS
Slug
googl-url-shorter
Published
2025-01-16
Title
Goo.gl Url Shorter <= 1.0.1 - Reflected Cross-Site Scripting
Slug
google-1
Published
2025-04-24
Title
Peadig’s Google +1 Button <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
google-adsense-and-hotel-booking
Published
2015-08-15
Title
Google Adsense & Hotel Booking <= 1.0.5 - Open Proxy
Slug
google-adsense-for-responsive-design-gard
Published
2025-12-21
Title
Google AdSense for Responsive Design – GARD <= 2.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
google-analyticator
Published
2015-06-19
Title
Google Analyticator <= 6.4.9.3 - Cross-Site Request Forgery (CSRF)
Slug
google-analyticator
Published
2015-08-24
Title
Google Analyticator < 6.4.9.6 - Multiple Cross-Site Scripting (XSS)
Slug
google-analyticator
Published
2009-07-29
Title
Google Analyticator < 5.2.1 - XSS