WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gd-bbpress-attachments
Published
2018-05-14
Title
GD bbPress Attachments <= 2.5 - Authenticated Stored XSS
Slug
gd-bbpress-attachments
Published
2022-12-05
Title
GD bbPress Attachments < 4.4 - Admin+ Stored XSS
Slug
gd-bbpress-attachments
Published
2024-11-19
Title
GD bbPress Attachments < 4.7.3 - Reflected Cross-Site Scripting
Slug
gd-bbpress-tools
Published
2025-09-22
Title
GD bbPress Tools < 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gd-mail-queue
Published
2023-06-09
Title
GD Mail Queue < 4.0 - Unauthenticated Stored Cross-Site Scripting
Slug
gd-mail-queue
Published
2024-12-28
Title
GD Mail Queue < 4.4 - Reflected Cross-Site Scripting
Slug
gd-mylist
Published
2022-02-21
Title
GD Mylist <= 1.1.1 - Admin+ Stored Cross-Site Scripting
Slug
gd-rating-system
Published
2018-01-08
Title
GD Rating System 2.3 - Multiple Vulnerabilities
Slug
gd-rating-system
Published
2017-02-24
Title
GD Rating System < 2.1 - XSS
Slug
gd-rating-system
Published
2024-01-08
Title
GD Rating System < 3.5.1 - Unauthenticated Stored Cross-Site Scripting via IP
Slug
gd-rating-system
Published
2024-07-11
Title
GD Rating System < 3.6.1 - Authenticated (Contributor+) Local File Inclusion
Slug
gd-rating-system
Published
2024-11-19
Title
GD Rating System < 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class Parameter
Slug
gd-rating-system
Published
2026-04-29
Title
GD Rating System < 3.7 - Unauthenticated SQL Injection
Slug
gd-security-headers
Published
2023-08-17
Title
GD Security Headers < 1.7 - Reflected XSS
Slug
gd-security-headers
Published
2023-11-06
Title
GD Security Headers < 1.7.1 - Admin+ SQLi
Slug
gd-star-rating
Published
2014-08-01
Title
GD Star Rating 1.9.22 - SQL Injection
Slug
gd-star-rating
Published
2014-08-01
Title
GD Star Rating 1.9.22 - Cross-Site Request Forgery (CSRF)
Slug
gd-star-rating
Published
2014-08-01
Title
GD Star Rating 1.9.18 - Export Security Bypass
Slug
gd-star-rating
Published
2014-08-01
Title
GD Star Rating <= 1.9.16 - Cross-Site Scripting (XSS)
Slug
gd-star-rating
Published
2014-08-01
Title
GD Star Rating <= 1.9.10 - SQL Injection
Slug
gd-star-rating
Published
2014-08-01
Title
GD Star Rating 1.9.7 - Cross-Site Scripting (XSS)
Slug
gdlr-hostel
Published
2025-05-20
Title
Goodlayers Hostel <= 3.1.2 - Unauthenticated PHP Object Injection
Slug
gdlr-hostel
Published
2025-05-20
Title
Goodlayers Hostel <= 3.1.2 - Reflected Cross-Site Scripting
Slug
gdlr-hostel
Published
2025-05-22
Title
Goodlayers Hostel <= 3.1.2 - Unauthenticated SQL Injection
Slug
gdlr-hotel
Published
2025-05-22
Title
Goodlayers Hotel <= 3.1.4 - Unauthenticated SQL Injection