Skip to contentAwordpresslife vulnerabilities
Newest
- awordpresslife portfolio filter galleryPortfolio Filter Gallery 2.0.2 - 2.2.0 - Contributor+ Cross-User Video Thumbnail Deletion via pfg_delete_video_thumbnailCVE-2026-1059772.2 Low
- awordpresslife portfolio filter galleryPortfolio Filter Gallery < 2.2.1 - Contributor+ Missing Authorization via Multiple AJAX ActionsCVE-2026-1059764.7 Medium
- awordpresslife event monster – event manager, ticket booking & registrationEvent Monster <= 2.1.0 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via em_capture_payment AJAX ActionCVE-2026-86085.3 Medium
- awordpresslife neom blogWordPress Neom Blog theme <= 0.0.9 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-492747.1 High
- awordpresslife album galleryAlbum Gallery – WordPress Gallery <= 1.6.3 - Authenticated (Editor+) PHP Object Injection via Gallery MetaCVE-2024-138337.2 High
- awplife event monster, awordpresslife event monster – manager & ticket booking +1 moreEvent monster <= 1.4.3 - Information Exposure Via Visitors List ExportCVE-2024-11396Public exploit5.3 Medium
- awordpresslife portfolio filter galleryPortfolio Gallery – Image Gallery Plugin <= 1.6.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2024-62626.4 Medium
- a wp life album gallery – wordpress gallery, awplife album gallery +1 moreWordPress Album Gallery – WordPress Gallery plugin <= 1.5.7 - Broken Access Control vulnerabilityCVE-2024-357204.3 Medium
- awordpresslife formulaFormula <= 0.5.1 - Reflected Cross-Site Scripting via quality_customizer_notify_dismiss_actionCVE-2024-56136.1 Medium
- awordpresslife formulaFormula <= 0.5.1 - Reflected Cross-Site Scripting via ti_customizer_notify_dismiss_recommended_pluginsCVE-2024-56386.1 Medium
- awplife grid gallery, awordpresslife grid gallery for images +1 moreGrid Gallery – Photo Image Grid Gallery <= 1.4.3 - Authenticated (Contributor+) PHP Object Injection via shortcodeCVE-2024-18977.5 High
- awordpresslife photo gallery for imagesPhoto Gallery <= 1.4.2 - Authenticated(Contributor+) PHP Object Injection via ShortcodeCVE-2024-18967.5 High
- awplife event monster, awordpresslife event monster – manager & ticket booking +1 moreEvent Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom MetaCVE-2024-18957.5 High
- a wp life modal popup boxModal Popup Box – Popup Builder, Show Offers And News in Popup <= 1.5.2 - Authenticated (Contributor+) PHP Object Injection in awl_modal_popup_box_shortcodeCVE-2024-20088.8 High
- awordpresslife responsive slideshow, awplife slider responsive slideshow +1 moreSlider Responsive Slideshow – Image slider, Gallery slideshow <= 1.3.8 - Authenticated (Contributor+) PHP Object InjectionCVE-2024-18598.8 High
- awordpresslife coming soon maintenance modeComing Soon Maintenance Mode <= 1.0.5 - Information ExposureCVE-2024-14755.3 Medium
- a wp life event monster – event management, tickets booking, upcoming event, awplife event monster +1 moreWordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-475255.9 Medium
- awplife blog filter, awordpresslife blog filter post filtering +1 moreBlog Filter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-52916.4 Medium
- a wp life album gallery – wordpress gallery, awplife album gallery +1 moreWordPress Album Gallery – WordPress Gallery Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-236464.3 Medium
- awordpresslife formulaRegular Expression Denial of Service (ReDoS) VulnerabilityCVE-2023-25166Fix available5.5 Medium
- awordpresslife grid gallery – photo image grid gallery, awplife grid gallery +1 moreGrid Gallery < 1.2.5 - Authenticated Stored Cross Site Scripting (XSS)CVE-2021-245295.4 Medium