Awplife vulnerabilities

Products

• Event Monster 6
• Album Gallery 2
• Blog Filter 2
• Contact Form Widget 2
• Formula 2
• Grid Gallery 2
• Slider Responsive Slideshow 2
• Weather Effect 2

Newest

• awordpresslife neom blog WordPress Neom Blog theme <= 0.0.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-49274 7.1 HighJuly 4, 2025
• awplife event monster, awordpresslife event monster – manager & ticket booking +1 more Event monster <= 1.4.3 - Information Exposure Via Visitors List Export CVE-2024-11396 Public exploit 5.3 MediumJanuary 13, 2025
• a wp life event management tickets booking, awplife event monster +1 more WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability CVE-2024-5059 5.3 MediumJune 21, 2024
• a wp life media slider – photo sleder, video slider, link slider, carousal slideshow, awplife media slider +1 more WordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerability CVE-2024-35717 4.3 MediumJune 10, 2024
• a wp life album gallery – wordpress gallery, awplife album gallery +1 more WordPress Album Gallery – WordPress Gallery plugin <= 1.5.7 - Broken Access Control vulnerability CVE-2024-35720 4.3 MediumJune 10, 2024
• a wp life image gallery – lightbox gallery, responsive photo gallery, masonry gallery, awplife image gallery +1 more WordPress Image Gallery plugin <= 1.4.5 - Broken Access Control vulnerability CVE-2024-35721 4.3 MediumJune 10, 2024
• a wp life slider responsive slideshow – image slider, gallery slideshow, awplife slider responsive slideshow +1 more WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability CVE-2024-35722 4.3 MediumJune 10, 2024
• awordpresslife formula Formula <= 0.5.1 - Reflected Cross-Site Scripting via quality_customizer_notify_dismiss_action CVE-2024-5613 6.1 MediumJune 8, 2024
• awordpresslife formula Formula <= 0.5.1 - Reflected Cross-Site Scripting via ti_customizer_notify_dismiss_recommended_plugins CVE-2024-5638 6.1 MediumJune 8, 2024
• a wp life contact form widget WordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerability CVE-2024-34754 5.3 MediumJune 3, 2024
• awplife grid gallery, awordpresslife grid gallery for images +1 more Grid Gallery – Photo Image Grid Gallery <= 1.4.3 - Authenticated (Contributor+) PHP Object Injection via shortcode CVE-2024-1897 7.5 HighMay 2, 2024
• awplife event monster, awordpresslife event monster – manager & ticket booking +1 more Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta CVE-2024-1895 7.5 HighApril 30, 2024
• awplife profile box shortcode and widget Profile Box Shortcode And Widget < 1.2.1 Admin+ Stored XSS CVE-2024-1401 4.8 MediumMarch 19, 2024
• awordpresslife responsive slideshow, awplife slider responsive slideshow +1 more Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.3.8 - Authenticated (Contributor+) PHP Object Injection CVE-2024-1859 8.8 HighMarch 1, 2024
• awordpresslife coming soon maintenance mode Coming Soon Maintenance Mode <= 1.0.5 - Information Exposure CVE-2024-1475 5.3 MediumFebruary 20, 2024
• a wp life event monster – event management, tickets booking, upcoming event, awplife event monster +1 more WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47525 5.9 MediumDecember 21, 2023
• awplife blog filter, awordpresslife blog filter post filtering +1 more Blog Filter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5291 6.4 MediumOctober 4, 2023
• vivacityinfotechjaipur comments by startbit, awplife blog filter +1 more Comments by Startbit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5295 6.4 MediumSeptember 30, 2023
• a wp life album gallery – wordpress gallery, awplife album gallery +1 more WordPress Album Gallery – WordPress Gallery Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-23646 4.3 MediumJuly 17, 2023
• awplife event monster Event Monster < 1.2.1 - Admin+ SQLi CVE-2022-3720 7.2 HighNovember 21, 2022
• awplife event monster Event Monster < 1.2.0 - Visitors Deletion via CSRF CVE-2022-3336 4.3 MediumNovember 21, 2022
• awplife weather effect, unknown weather effect – christmas santa snow falling +1 more Weather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting CVE-2021-24709 4.8 MediumOctober 11, 2021
• awplife weather effect, unknown weather effect – christmas santa snow falling +1 more Weather Effect < 1.3.4 - CSRF to Stored Cross-Site Scripting CVE-2021-24683 5.4 MediumOctober 11, 2021
• awordpresslife grid gallery – photo image grid gallery, awplife grid gallery +1 more Grid Gallery < 1.2.5 - Authenticated Stored Cross Site Scripting (XSS) CVE-2021-24529 5.4 MediumAugust 23, 2021
• awplife contact form widget The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9... CVE-2019-17072 9.8 CriticalOctober 10, 2019