Skip to contentWp Chill vulnerabilities
Newest
- wp chill download monitorDownload Monitor <= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and DisablingCVE-2026-44015.4 Medium
- wp chill download monitorDownload Monitor <= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'CVE-2026-31247.5 High
- wp chill filrWordPress Filr plugin <= 1.2.14 - Arbitrary File Upload vulnerabilityCVE-2026-281338.5 High
- opentext filrImproper access control vulnerability has been discovered in OpenText™ Filr.CVE-2026-32668.3 High
- wp chill image photo gallery final tiles gridWordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerabilityCVE-2026-253754.3 Medium
- wp chill passsterWordPress Passster plugin <= 4.2.25 - Broken Access Control vulnerabilityCVE-2026-250366.5 Medium
- wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.2.20 - Broken Access Control vulnerabilityCVE-2026-249576.5 Medium
- wp chill modula image galleryWordPress Modula Image Gallery plugin <= 2.13.6 - Broken Access Control vulnerabilityCVE-2026-249394.3 Medium
- wp chill gallery photoblocksWordPress Gallery PhotoBlocks plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-243896.5 Medium
- wp chill modula image galleryWordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-239765.9 Medium
- wp chill image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid <= 3.6.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Gallery ManagementCVE-2025-154665.4 Medium
- wp chill image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid <= 3.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'Custom Scripts' SettingCVE-2025-136936.4 Medium
- wp chill image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid <= 3.6.7 - Missing Authorization to Authenticated (Contributor+) Gallery ManagementCVE-2025-144555.4 Medium
- wp chill filrWordPress Filr plugin <= 1.2.10 - Arbitrary File Deletion vulnerabilityCVE-2025-642307.7 High
- wp chill passsterWordPress Passster plugin <= 4.2.19 - Sensitive Data Exposure vulnerabilityCVE-2025-642187.5 High
- wp chill revive.soWordPress Revive.so Plugin <= 2.0.6 - Broken Access Control VulnerabilityCVE-2025-595514.3 Medium
- wp chill passsterWordPress Passster Plugin <= 4.2.18 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-57926Public exploit6.5 Medium
- wp chill gallery photoblocksWordPress Gallery PhotoBlocks Plugin <= 1.3.1 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-586106.5 Medium
- wp chill download monitorWordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion VulnerabilityCVE-2025-474397.5 High
- wp chill revive.soWordPress Revive.so plugin <= 2.0.3 - Broken Access Control vulnerabilityCVE-2025-322334.3 Medium
- machothemes image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid <= 3.6.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2024-62616.4 Medium
- wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.2.3 - Broken Access Control vulnerabilityCVE-2025-269755.3 Medium
- wp chill rsvp and event managementWordPress RSVP and Event Management Plugin <= 2.7.14 - SQL Injection vulnerabilityCVE-2025-246837.6 High
- wp chill htaccess file editorWordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerabilityCVE-2025-227735.3 Medium
- wp chill rsvp and event managementRSVP and Event Management <= 2.7.13 - Missing AuthorizationCVE-2024-127115.3 Medium
- wp chill kali formsWordPress Kali Forms plugin <= 2.3.27 - Broken Access Control vulnerabilityCVE-2023-460835.3 Medium
- wp chill kali formsWordPress Contact Form builder with drag & drop plugin <= 2.3.28 - Broken Access Control vulnerabilityCVE-2023-452756.5 Medium
- wp chill htaccess file editorWordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerabilityCVE-2024-492566.5 Medium
- wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerabilityCVE-2024-473624.3 Medium
- wp chill download monitorDownload Monitor <= 5.0.13 - Missing Authorization to Sensitive Information ExposureCVE-2024-103994.3 Medium
- wp chill download monitorDownload Monitor <= 5.0.12 - Missing Authorization to API Key ManipulationCVE-2024-100924.3 Medium
- wp chill download monitorDownload Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data ExportCVE-2022-49727.5 High
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- wp chill download monitorDownload Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop EnableCVE-2024-85524.3 Medium
- cpothemes allegiantWordPress Allegiant theme <= 1.2.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-433296.5 Medium
- wp chill filrWordPress Filr plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-432166.5 Medium
- opentext filrStored XSS vulnerability has been discovered in OpenText™ Filr. The vulnerability could cause users to not be warned when clicking links to external sites.CVE-2024-41872.1 Low
- machothemes image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid < 3.6.0 - Contributor+ Stored XSSCVE-2024-37106.8 Medium
- wp chill download monitorDownload Monitor <= 4.9.13 - Missing AuthorizationCVE-2024-32695.4 Medium
- wp chill download monitorWordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerabilityCVE-2024-305017.6 High
- wp chill download monitorWordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data ExposureCVE-2022-45354Public exploitEPSS 38.1%5.3 Medium
- wp chill download monitorWordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File UploadCVE-2023-340079.9 Critical
- microfocus filrAdministrator equivalent Filr user can access proxy administrator credentialsCVE-2023-322687.2 High
- filr project filrFilr – Secure document library < 1.2.3.6 - Author+ RCE via file upload with phar extCVE-2023-57628.8 High
- wp chill download monitorWordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)CVE-2023-312194.1 Medium
- wp chill brillianceWordPress Brilliance Theme <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-281715.4 Medium
- colorlib activello, newspaper x, cpothemes brilliance +12 more +14 moreEpsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/DeactivationCVE-2020-367216.5 Medium
- colorlib activello, bonkers, illdy +14 more +16 moreEpsilon Framework Themes (Various Versions) - Function InjectionCVE-2020-36708Public exploitEPSS 65.3%9.8 Critical
- unknown passster, passster project passter +1 morePassster < 3.5.5.8 - Contributor+ Stored Cross-Site ScriptingCVE-2021-248375.4 Medium
- unknown passster, passster project passter +1 morePassster < 3.5.5.9 - Protection Bypass & Arbitrary Post AccessCVE-2021-248817.5 High
- Show moreLoading…