WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gsheetconnector-wpforms-pro
Published
2023-06-12
Title
WPForms Google Sheet Connector < 3.4.6 - Reflected XSS
Slug
gslideshow
Published
2014-12-18
Title
Gslideshow <= 0.1 - Multiple CSRF
Slug
gspeech
Published
2025-10-17
Title
GSpeech TTS – WordPress Text To Speech Plugin < 3.18.0 - Authenticated (Admin+) SQL injection
Slug
gst-for-woocommerce
Published
2025-09-26
Title
GST for WooCommerce <= 2.0 - Cross-Site Request Forgery
Slug
gt-tabs
Published
2025-04-24
Title
Tabs <= 4.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
gt3-photo-video-gallery
Published
2024-04-24
Title
Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery < 2.7.7.22 - Authenticated (Author+) Cross-Site Scripting
Slug
gt3-photo-video-gallery
Published
2025-01-31
Title
Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery < 2.7.7.25 - Reflected Cross-Site Scripting
Slug
gt3-photo-video-gallery
Published
2025-05-07
Title
Photo Gallery < 2.7.7.26 - Contributor+ Stored XSS
Slug
gt3-photo-video-gallery
Published
2025-12-31
Title
Photo Gallery <= 2.7.7.26 - Reflected Cross-Site Scripting
Slug
gtbabel
Published
2025-02-17
Title
Gtbabel < 6.6.9 - Unauthenticated Admin Account Takeover
Slug
gtg-advanced-blocks
Published
2024-09-24
Title
GutenGeek Free Gutenberg Blocks for WordPress <= 1.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
gtm-kit
Published
2025-03-31
Title
GTM Kit < 2.4.1 - Unauthenticated Sensitive Information Exposure
Slug
gtm-server-side
Published
2024-09-27
Title
GTM Server Side < 2.1.20 - Reflected Cross-Site Scripting
Slug
gtmetrix-for-wordpress
Published
2023-03-02
Title
GTmetrix for WordPress < 0.4.6 - Reflected XSS
Slug
gtmetrix-for-wordpress
Published
2023-05-09
Title
GTmetrix for WordPress < 0.4.6 - Reflected Cross-Site Scripting
Slug
gtmetrix-for-wordpress
Published
2023-07-19
Title
GTmetrix for WordPress < 0.4.8 - Arbitrary Post Deletion via CSRF
Slug
gtpayment-donation
Published
2024-11-29
Title
GTPayment Donations <= 1.0.0 - Stored XSS via CSRF
Slug
gtranslate
Published
2014-08-01
Title
GTranslate 1.0.12 - gtranslate.php Widget Code Editing CSRF
Slug
gtranslate
Published
2017-02-17
Title
GTranslate < 2.8.11 - Unauthenticated Open Redirect
Slug
gtranslate
Published
2020-04-20
Title
GTranslate < 2.8.52 - Unauthenticated Reflected Cross Site Scripting (XSS)
Slug
gtranslate
Published
2021-07-23
Title
GTranslate < 2.8.65 - Reflected Cross-Site Scripting (XSS)
Slug
gtranslate
Published
2022-01-10
Title
GTranslate < 2.9.7 - Reflected Cross-Site Scripting
Slug
gtranslate
Published
2022-03-07
Title
Translate WordPress with GTranslate < 2.9.9 - CSRF to Account Takeover
Slug
gtranslate
Published
2023-08-30
Title
Translate WordPress with GTranslate < 3.0.4 - Admin+ Stored XSS
Slug
guardgiant
Published
2023-11-28
Title
WordPress Brute Force Protection < 2.2.6 - Admin+ SQLi