Wp Chill vulnerabilities

Products

• Download Monitor 23
• Image Photo Gallery Final Tiles Grid 16
• Passster 15
• Filr 11
• Strong Testimonials 10
• Gallery Photoblocks 8
• Kali Forms 8
• Modula Image Gallery 6
• Rsvp And Event Management 4
• Brilliance 3
• Revive.so 3
• Allegiant 2
• Htaccess File Editor 2

Newest

• wp chill strong testimonials WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerability CVE-2026-114706 6.5 MediumOctober 29, 2026
• kaliforms kali forms WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability CVE-2026-39782 5.3 MediumOctober 29, 2026
• kaliforms kali forms WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerability CVE-2026-48196 6.5 MediumOctober 29, 2026
• kaliforms kali forms WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability CVE-2026-42703 6.5 MediumOctober 29, 2026
• wp chill gallery photoblocks WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-116408 6.5 MediumOctober 26, 2026
• wp chill gallery photoblocks WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-114710 6.5 MediumOctober 26, 2026
• unknown download monitor Download Monitor < 5.3.4 - Reflected XSS via Cross-Origin Download Link CVE-2026-112207 7.1 HighOctober 24, 2026
• unknown download monitor Download Monitor < 5.3.5 - Multisite Subsite Admin+ Incorrect Authorization via Approved Download Paths REST Route CVE-2026-112219 4.9 MediumOctober 23, 2026
• wp chill strong testimonials WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability CVE-2026-112843 4.3 MediumOctober 22, 2026
• wp chill strong testimonials WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability CVE-2026-107435 7.1 HighOctober 21, 2026
• wp chill strong testimonials WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability CVE-2026-107436 8.8 HighOctober 18, 2026
• wp chill passster WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability CVE-2026-110896 Public exploit 5.3 MediumOctober 16, 2026
• wp chill download monitor WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-110375 6.5 MediumOctober 15, 2026
• wp chill strong testimonials WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability CVE-2026-109897 5.4 MediumOctober 15, 2026
• wp chill strong testimonials WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability CVE-2026-110371 4.3 MediumOctober 15, 2026
• unknown image photo gallery final tiles grid Image Photo Gallery Final Tiles Grid < 3.6.16 - Contributor+ Stored XSS via 'lightboxOptions' Parameter CVE-2026-107178 6.8 MediumOctober 14, 2026
• unknown image photo gallery final tiles grid Image Photo Gallery Final Tiles Grid < 3.6.15 - Contributor+ Stored XSS via Gallery Configuration Update CVE-2026-104644 6.8 MediumOctober 14, 2026
• wp chill download monitor integration for woocommerce WordPress Download Monitor integration for WooCommerce plugin <= 1.0.3 - Broken Access Control vulnerability CVE-2026-109896 4.3 MediumOctober 13, 2026
• unknown gallery photoblocks Gallery PhotoBlocks 1.3.5 - Contributor+ Stored XSS CVE-2026-107323 6.8 MediumOctober 10, 2026
• unknown image photo gallery final tiles grid Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Stored XSS via Gallery Shortcode Attributes CVE-2026-104646 6.8 MediumOctober 8, 2026
• unknown image photo gallery final tiles grid Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update via IDOR CVE-2026-104645 2.7 LowOctober 8, 2026
• wp chill modula image gallery WordPress Modula Image Gallery plugin <= 3.0.11 - Sensitive Data Exposure vulnerability CVE-2026-105876 5.3 MediumOctober 7, 2026
• wp chill image photo gallery final tiles grid WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerability CVE-2026-104409 6.5 MediumOctober 5, 2026
• wp chill download monitor Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor CVE-2026-100182 7.2 HighOctober 2, 2026
• wp chill strong testimonials WordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability CVE-2026-97286 Public exploit 6.5 MediumSeptember 30, 2026
• wp chill passster WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability CVE-2026-62114 5.3 MediumSeptember 11, 2026
• unknown passster Passster < 4.2.26 - Global Protection Bypass CVE-2025-15490 5.3 MediumSeptember 2, 2026
• unknown passster Passster < 4.2.24 - Password Protection Bypass CVE-2025-15489 5.3 MediumSeptember 2, 2026
• wp chill gallery photoblocks WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-84781 6.5 MediumSeptember 2, 2026
• wp chill kali forms WordPress Kali Forms plugin <= 2.4.23 - Broken Access Control vulnerability CVE-2026-81276 5.3 MediumAugust 27, 2026
• wp chill image photo gallery final tiles grid Image Photo Gallery Final Tiles Grid <= 3.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'delay' Shortcode Attribute CVE-2026-4559 6.4 MediumAugust 22, 2026
• unknown passster Content Protector (Passster) < 4.3.9 - Unauthenticated Protected Content Disclosure via REST Path Allowlist Bypass CVE-2026-17559 5.3 MediumAugust 21, 2026
• unknown download monitor Download Monitor < 5.2.6 - Unauthenticated Download Log Injection CVE-2026-16608 5.3 MediumAugust 8, 2026
• unknown passster Content Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST API CVE-2025-15674 2.7 LowAugust 6, 2026
• unknown passster Content Protector (Passster) < 4.3.6 - Unauthenticated Protected Content Disclosure via Content-Lock Block data-content Attribute CVE-2026-16604 7.5 HighAugust 5, 2026
• unknown passster Content Protector (Passster) < 4.3.6 - Unauthenticated Category-Locked Content Disclosure via Core REST API CVE-2026-16603 7.5 HighAugust 5, 2026
• unknown passster Content Protector (Passster) < 4.3.6 - Unauthenticated Non-Public Post Content Disclosure via Captcha REST Endpoint CVE-2026-16602 7.5 HighAugust 5, 2026
• wp chill kali forms WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerability CVE-2026-65446 7.1 HighJuly 27, 2026
• wp chill gallery photoblocks WordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-66448 6.5 MediumJuly 27, 2026
• wp chill modula image gallery WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability CVE-2026-65475 6.5 MediumJuly 23, 2026
• wp chill kali forms WordPress Kali Forms plugin <= 2.4.18 - Arbitrary File Deletion vulnerability CVE-2026-59542 7.7 HighJuly 23, 2026
• wp chill modula image gallery WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability CVE-2026-42688 6.5 MediumJune 15, 2026
• wp chill download monitor WordPress Download Monitor plugin <= 5.1.9 - Non-Arbitrary File Download vulnerability CVE-2026-39489 4.4 MediumJune 15, 2026
• wp chill modula image gallery WordPress Modula Image Gallery plugin <= 2.14.18 - PHP Object Injection vulnerability CVE-2026-39481 7.2 HighJune 15, 2026
• wp chill rsvp and event management WordPress RSVP and Event Management plugin <= 2.7.16 - Broken Access Control vulnerability CVE-2026-27398 5.3 MediumMay 25, 2026
• wp chill image photo gallery final tiles grid WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability CVE-2026-27424 4.3 MediumMay 20, 2026
• wp chill revive.so WordPress Revive.so plugin <= 2.0.7 - Broken Access Control vulnerability CVE-2026-39561 5.3 MediumApril 8, 2026
• wp chill rsvp and event management WordPress RSVP and Event Management plugin <= 2.7.16 - Sensitive Data Exposure vulnerability CVE-2026-39536 5.3 MediumApril 8, 2026
• wp chill image photo gallery final tiles grid WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-39510 2.7 LowApril 8, 2026
• wp chill download monitor WordPress Download Monitor plugin <= 5.1.8 - SQL Injection vulnerability CVE-2026-39486 8.5 HighApril 8, 2026
• Show olderLoading…