WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gosign-posts-slider-block
Published
2025-04-01
Title
Gosign – Posts Slider Block <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gotcha-gesture-based-captcha
Published
2025-03-21
Title
Gotcha | Gesture-based Captcha <= 1.0.0 - Reflected Cross-Site Scripting via menu Parameter
Slug
gotmls
Published
2012-07-23
Title
Get Off Malicious Scripts - Cross-Site Scripting (XSS)
Slug
gotmls
Published
2015-05-15
Title
Anti-Malware & Brute-Force Security by ELI < 4.15.20 - Multiple Reflected XSS
Slug
gotmls
Published
2015-05-25
Title
Anti-Malware & Brute-Force Security by ELI <= 4.15.22 - Stored XSS
Slug
gotmls
Published
2016-03-23
Title
Anti-Malware Security & Brute-Force Firewall < 4.15.44 - XSS & CSRF
Slug
gotmls
Published
2022-01-24
Title
Anti-Malware Security and Brute-Force Firewall < 4.20.94 - Admin+ Reflected Cross-Site Scripting
Slug
gotmls
Published
2022-03-29
Title
Anti-Malware Security and Brute-Force Firewall < 4.20.96 - Reflected Cross-Site Scripting
Slug
gotmls
Published
2022-08-03
Title
Anti-Malware Security and Brute-Force Firewall < 4.21.83 - Reflected Cross-Site Scripting
Slug
gotmls
Published
2024-03-12
Title
Anti-Malware Security and Brute-Force Firewall < 4.23.56 - Unauthenticated Remote Code Execution
Slug
gotmls
Published
2025-10-28
Title
Anti-Malware Security and Brute-Force Firewall < 4.23.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Slug
gotowp
Published
2023-02-22
Title
GoToWP <= 5.1.1 - Contributor+ Stored XSS
Slug
gou-wc-account-tabs
Published
2024-12-11
Title
Gou Manage My Account Menu < 1.0.1.9 - Missing Authorization
Slug
gourl-bitcoin-payment-gateway-paid-downloads-membership
Published
2018-10-31
Title
GoUrl Bitcoin Payment Gateway < 1.4.14 - Shell Upload
Slug
gourl-bitcoin-payment-gateway-paid-downloads-membership
Published
2025-09-05
Title
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership <= 1.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
gozen-forms
Published
2025-07-03
Title
GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via emdedSc()
Slug
gozen-forms
Published
2025-07-03
Title
GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via dirGZActiveForm()
Slug
gp-back-to-top
Published
2025-03-24
Title
GP Back To Top <= 3.0 - Cross-Site Request Forgery
Slug
gp-notification-bar
Published
2025-03-31
Title
Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
gp-premium
Published
2024-06-04
Title
GP Premium < 2.4.1 - Reflected Cross-Site Scripting
Slug
gp-unique-id
Published
2024-04-10
Title
GP Unique ID < 1.5.6 - Unauthenticated Form Submission Unique ID Modification
Slug
gplus-comments
Published
2024-05-06
Title
Comments Evolved for WordPress <= 1.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
gpp-slideshow
Published
2025-06-05
Title
GPP Slideshow <= 1.3.5 - Missing Authorization
Slug
gps-plotter
Published
2023-04-21
Title
GPS Plotter <= 5.3.0 - Admin+ Stored XSS
Slug
gpt3-ai-content-generator
Published
2023-01-19
Title
GPT3 AI Content Writer < 1.4.38 - Subscriber+ Arbitrary Post Content Update