Skip to contentA Wp Life vulnerabilities
Newest
- a wp life responsive slider galleryWordPress Responsive Slider Gallery plugin <= 1.5.5 - PHP Object Injection vulnerabilityCVE-2026-941227.2 High
- a wp life webenvoWordPress Webenvo theme <= 0.0.6 - Arbitrary File Upload vulnerabilityCVE-2026-395899.9 Critical
- a wp life blog filterWordPress Blog Filter plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-395176.5 Medium
- a wp life slider responsive slideshow – image slider, gallery slideshowWordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.5.4 - PHP Object Injection vulnerabilityCVE-2026-223468.8 High
- a wp life image gallery – lightbox gallery, responsive photo gallery, masonry galleryWordPress Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery plugin <= 1.6.0 - PHP Object Injection vulnerabilityCVE-2026-223458.8 High
- a wp life modal popup boxWordPress Modal Popup Box plugin <= 1.6.1 - PHP Object Injection vulnerabilityCVE-2025-685268.8 High
- a wp life contact form widgetWordPress Contact Form Widget plugin <= 1.5.1 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-621345.4 Medium
- a wp life blog filterWordPress Blog Filter plugin <= 1.7.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-690336.5 Medium
- a wp life login page customizer – customizer login page, admin page, custom designWordPress Login Page Customizer – Customizer Login Page, Admin Page, Custom Design plugin <= 2.1.1 - Broken Access Control vulnerabilityCVE-2025-499026.5 Medium
- a wp life contact form widgetWordPress Contact Form Widget plugin <= 1.4.6 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-474917.4 High
- a wp life right click disable or banWordPress Right Click Disable OR Ban plugin <= 1.1.17 - CSRF to Stored XSS vulnerabilityCVE-2025-395487.1 High
- a wp life contact form widgetWordPress Contact Form Widget plugin <= 1.4.2 - CSRF vulnerabilityCVE-2024-480375.4 Medium
- a wp life event management tickets booking, awplife event monster +1 moreWordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerabilityCVE-2024-50595.3 Medium
- a wp life media slider – photo sleder, video slider, link slider, carousal slideshow, awplife media slider +1 moreWordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerabilityCVE-2024-357174.3 Medium
- a wp life album gallery – wordpress gallery, awplife album gallery +1 moreWordPress Album Gallery – WordPress Gallery plugin <= 1.5.7 - Broken Access Control vulnerabilityCVE-2024-357204.3 Medium
- a wp life image gallery – lightbox gallery, responsive photo gallery, masonry gallery, awplife image gallery +1 moreWordPress Image Gallery plugin <= 1.4.5 - Broken Access Control vulnerabilityCVE-2024-357214.3 Medium
- a wp life slider responsive slideshow – image slider, gallery slideshow, awplife slider responsive slideshow +1 moreWordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerabilityCVE-2024-357224.3 Medium
- a wp life contact form widgetWordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerabilityCVE-2024-347545.3 Medium
- a wp life video gallery – api gallery, youtube and vimeo, link galleryWordPress Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugin <= 1.5.3 - Broken Access Control vulnerabilityCVE-2024-343774.3 Medium
- a wp life modal popup boxModal Popup Box – Popup Builder, Show Offers And News in Popup <= 1.5.2 - Authenticated (Contributor+) PHP Object Injection in awl_modal_popup_box_shortcodeCVE-2024-20088.8 High
- a wp life event monster – event management, tickets booking, upcoming event, awplife event monster +1 moreWordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-475255.9 Medium
- a wp life album gallery – wordpress gallery, awplife album gallery +1 moreWordPress Album Gallery – WordPress Gallery Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-236464.3 Medium