WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gutenverse
Published
2026-05-04
Title
Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem < 3.6.0 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl'
Slug
gutenverse
Published
2026-05-26
Title
Gutenverse < 3.4.7 - Reflected Cross-Site Scripting via 's' Parameter
Slug
gutenverse
Published
2026-06-26
Title
Gutenverse < 3.8.1 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter
Slug
gutenverse
Published
2026-08-24
Title
Gutenverse < 4.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute
Slug
gutenverse
Published
2026-08-25
Title
Gutenverse < 4.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Blocks
Slug
gutenverse
Published
2026-09-24
Title
Gutenverse < 4.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comment Block 'suffixMain' Attribute
Slug
gutenverse-companion
Published
2026-06-17
Title
Gutenverse Companion < 2.5.1 - Missing Authorization
Slug
gutenverse-companion
Published
2026-08-10
Title
Gutenverse Companion < 2.5.2 - Unauthenticated Server-Side Request Forgery
Slug
gutenverse-form
Published
2025-11-28
Title
Gutenverse Form < 2.3.0 - Missing Authorization
Slug
gutenverse-form
Published
2025-12-20
Title
Gutenverse Form < 2.3.2 - Missing Authorization
Slug
gutenverse-form
Published
2026-01-07
Title
Gutenverse Form < 2.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
gutenverse-form
Published
2026-06-24
Title
Gutenverse Form – Contact Form Builder, Block Form & Booking Form < 2.5.0 - Unauthenticated Stored Cross-Site Scripting
Slug
gutenverse-form
Published
2026-10-12
Title
Gutenverse Form < 3.0.11 - Contributor+ Stored XSS via SVG Icon
Slug
gutenverse-news
Published
2025-06-18
Title
Gutenverse News < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via elementId Parameter
Slug
gutenverse-news
Published
2025-12-03
Title
Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons < 3.1.0 - Missing Authorization
Slug
gutenverse-news
Published
2026-09-09
Title
Gutenverse News < 3.3.3 - Unauthenticated Stored XSS via Comment Content
Slug
gw-ai-website-builder
Published
2026-07-09
Title
GW AI Website Builder < 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Deletion
Slug
gw-website-builder-main
Published
2026-09-02
Title
AI Website Builder (GitHub build) 1.0.0 - Unauthenticated RCE via Unprotected REST Routes
Slug
gwa-autoresponder
Published
2022-01-27
Title
GWA AutoResponder <= 2.3 - Unauthenticated SQL Injection
Slug
gwebpro-store-locator
Published
2024-12-20
Title
G Web Pro Store Locator <= 2.1 - Reflected Cross-Site Scripting
Slug
gwebpro-store-locator
Published
2025-01-16
Title
G Web Pro Store Locator <= 2.0.1 - Reflected Cross-Site Scripting
Slug
gwolle-gb
Published
2015-10-21
Title
Gwolle Guestbook <= 1.5.3 - Remote File Inclusion (RFI)
Slug
gwolle-gb
Published
2017-03-01
Title
Gwolle Guestbook <= 2.1.0 - Cross-Site Request Forgery (CSRF)
Slug
gwolle-gb
Published
2017-03-01
Title
Gwolle Guestbook <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
gwolle-gb
Published
2018-07-28
Title
Gwolle Guestbook <= 2.5.3 - Cross-Site Scripting (XSS)