WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gamipress-button
Published
2024-03-19
Title
GamiPress – Button < 1.0.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
gamipress-link
Published
2024-06-04
Title
GamiPress – Link < 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gamipress-reset-user
Published
2024-07-20
Title
GamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF
Slug
gamipress-vimeo-integration
Published
2023-01-11
Title
GamiPress – Vimeo integration < 1.0.9 - Contributor+ Stored XSS
Slug
ganohrs-toggle-shortcode
Published
2024-12-13
Title
Ganohrs Toggle Shortcode < 0.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gantry
Published
2024-10-17
Title
Gantry 4 Framework <= 4.1.21 - Reflected Cross-Site Scripting
Slug
gap-hub-user-role
Published
2024-12-18
Title
gap-hub-user-role <= 3.4.1 - Cross-Site Request Forgery
Slug
garagesale
Published
2014-04-25
Title
Garagesale < 1.2.3 - XSS
Slug
garden-gnome-package
Published
2023-11-06
Title
Garden Gnome Package < 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
garden-gnome-package
Published
2024-09-23
Title
Garden Gnome Package < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
garden-gnome-package
Published
2025-01-07
Title
Garden Gnome Package < 2.4.0 - Authenticated (Author+) Arbitrary File Upload
Slug
garden-gnome-package
Published
2026-02-21
Title
Garden Gnome Package < 2.5.2 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
gatormail-smart-forms
Published
2025-01-10
Title
GatorMail SmartForms < 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gaxx-keywords
Published
2024-12-12
Title
Gaxx Keywords <= 0.2 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
gb-forms-db
Published
2025-07-10
Title
GB Forms DB < 1.0.3 - Unauthenticated Remote Code Execution
Slug
gb-gallery-slideshow
Published
2014-11-02
Title
GB Gallery Slideshow 1.5 - SQL Injection
Slug
gb-gallery-slideshow
Published
2025-04-01
Title
GB Gallery Slideshow <= 1.3 - Missing Authorization
Slug
gb-gallery-slideshow
Published
2025-04-10
Title
GB Gallery Slideshow <= 1.3 - Reflected Cross-Site Scripting
Slug
gbi-to-print
Published
2026-05-26
Title
GBI To Print <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'div' Shortcode Attribute
Slug
gboutique
Published
2020-03-24
Title
Multiple plugins - Unauthenticated Dompdf Local File Inclusion (LFI)
Slug
gboy-custom-google-map
Published
2024-11-08
Title
Gboy Custom Google Map <= 1.2 - Authenticated (Contributor+) SQL Injection
Slug
gc-social-wall
Published
2025-06-25
Title
GC Social wall <= 1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gc-testimonials
Published
2022-12-07
Title
GC Testimonials <= 1.3.2 - Contributor+ Stored XSS
Slug
gd-bbpress-attachments
Published
2015-07-09
Title
GD bbPress Attachments <= 2.2 - Local File Inclusion
Slug
gd-bbpress-attachments
Published
2015-07-09
Title
GD bbPress Attachments <= 2.2 - Authenticated Reflected Cross-Site Scripting (XSS)