WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gt3-photo-video-gallery
Published
2025-05-07
Title
Photo Gallery < 2.7.7.26 - Contributor+ Stored XSS
Slug
gt3-photo-video-gallery
Published
2025-12-31
Title
Photo Gallery < 2.7.7.27 - Reflected Cross-Site Scripting
Slug
gtbabel
Published
2025-02-17
Title
Gtbabel < 6.6.9 - Unauthenticated Admin Account Takeover
Slug
gtg-advanced-blocks
Published
2024-09-24
Title
GutenGeek Free Gutenberg Blocks for WordPress <= 1.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
gtm-kit
Published
2025-03-31
Title
GTM Kit < 2.4.1 - Unauthenticated Sensitive Information Exposure
Slug
gtm-server-side
Published
2024-09-27
Title
GTM Server Side < 2.1.20 - Reflected Cross-Site Scripting
Slug
gtmetrix-for-wordpress
Published
2023-03-02
Title
GTmetrix for WordPress < 0.4.6 - Reflected XSS
Slug
gtmetrix-for-wordpress
Published
2023-05-09
Title
GTmetrix for WordPress < 0.4.6 - Reflected Cross-Site Scripting
Slug
gtmetrix-for-wordpress
Published
2023-07-19
Title
GTmetrix for WordPress < 0.4.8 - Arbitrary Post Deletion via CSRF
Slug
gtpayment-donation
Published
2024-11-29
Title
GTPayment Donations <= 1.0.0 - Stored XSS via CSRF
Slug
gtranslate
Published
2014-08-01
Title
GTranslate 1.0.12 - gtranslate.php Widget Code Editing CSRF
Slug
gtranslate
Published
2017-02-17
Title
GTranslate < 2.8.11 - Unauthenticated Open Redirect
Slug
gtranslate
Published
2020-04-20
Title
GTranslate < 2.8.52 - Unauthenticated Reflected Cross Site Scripting (XSS)
Slug
gtranslate
Published
2021-07-23
Title
GTranslate < 2.8.65 - Reflected Cross-Site Scripting (XSS)
Slug
gtranslate
Published
2022-01-10
Title
GTranslate < 2.9.7 - Reflected Cross-Site Scripting
Slug
gtranslate
Published
2022-03-07
Title
Translate WordPress with GTranslate < 2.9.9 - CSRF to Account Takeover
Slug
gtranslate
Published
2023-08-30
Title
Translate WordPress with GTranslate < 3.0.4 - Admin+ Stored XSS
Slug
guardgiant
Published
2023-11-28
Title
WordPress Brute Force Protection < 2.2.6 - Admin+ SQLi
Slug
guardgiant
Published
2024-11-22
Title
GuardGiant Brute Force Protection <= 2.2.6 - Reflected Cross-Site Scripting
Slug
guest-author
Published
2023-12-04
Title
Guest Author < 2.4 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
guest-author
Published
2023-12-01
Title
Guest Author < 2.4 - Contributor+ Stored XSS
Slug
guest-author-affiliate
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
guest-author-affiliate
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
guest-author-name
Published
2024-01-26
Title
(Simply) Guest Author Name < 4.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
guest-author-name
Published
2025-07-04
Title
(Simply) Guest Author Name < 4.40 - Contributor+ Stored XSS