Skip to contentWpchill vulnerabilities
Newest
- wp chill htaccess file editorWordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerabilityCVE-2025-227735.3 Medium
- wpchill modula image gallery, modula image gallery – photo grid & video gallery +1 moreModula Image Gallery <= 2.11.10 - Authenticated (Author+) Arbitrary File UploadCVE-2024-128538.8 High
- wp chill rsvp and event managementRSVP and Event Management <= 2.7.13 - Missing AuthorizationCVE-2024-127115.3 Medium
- wpchill passster, passster – password protect pages and content +1 morePassster – Password Protect Pages and Content <= 4.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information ExposureCVE-2024-112825.3 Medium
- wpchill simple restrictSimple Restrict <= 1.2.7 - Unauthenticated Content Restriction Bypass to Sensitive Information ExposureCVE-2024-111065.3 Medium
- wp chill htaccess file editorWordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerabilityCVE-2024-492566.5 Medium
- wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerabilityCVE-2024-473624.3 Medium
- wp chill download monitorDownload Monitor <= 5.0.13 - Missing Authorization to Sensitive Information ExposureCVE-2024-103994.3 Medium
- wp chill download monitorDownload Monitor <= 5.0.12 - Missing Authorization to API Key ManipulationCVE-2024-100924.3 Medium
- wp chill download monitorDownload Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data ExportCVE-2022-49727.5 High
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- wp chill download monitorDownload Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop EnableCVE-2024-85524.3 Medium
- arnoldasarny image seo – ai-driven image seo optimizer, wpchill imageseo, optimize images alt text \(alt tag\) \& names for seo using ai +2 moreOptimize Images ALT Text (alt tag) & names for SEO using AI <= 3.1.1 - Unauthenticated Full Path DisclosureCVE-2024-65715.3 Medium
- machothemes image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid < 3.6.0 - Contributor+ Stored XSSCVE-2024-37106.8 Medium
- wpchill strong testimonialsStrong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views ModificationCVE-2023-64914.3 Medium
- wp chill download monitorDownload Monitor <= 4.9.13 - Missing AuthorizationCVE-2024-32695.4 Medium
- unknown strong testimonialsStrong Testimonials < 3.1.12 - Contributor+ Stored XSSCVE-2024-32614.8 Medium
- wpchill remove footer creditWordPress Remove Footer Credit plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-324295.9 Medium
- wpchill passster, passster – password protect pages and content +1 morePassster <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_protector ShortcodeCVE-2024-20266.4 Medium
- wp chill download monitorWordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerabilityCVE-2024-305017.6 High
- wpchill simple restrictSimple Restrict <= 1.2.6 - Missing Authorization to Sensitive Information ExposureCVE-2024-10835.3 Medium
- kaliforms contact form builder, wpchill kali forms — contact form & drag-and-drop builder +1 moreContact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing AuthorizationCVE-2024-12184.3 Medium
- kaliforms contact form builder, wpchill kali forms — contact form & drag-and-drop builder +1 moreContact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization to Arbitrary Plugin DeactivationCVE-2024-12177.6 High
- wpchill passster, passster – password protect pages and content +1 morePassster – Password Protect Pages and Content <= 4.2.6.2 - Missing Authorization to Sensitive Information ExposureCVE-2024-06165.3 Medium
- wp chill download monitorWordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data ExposureCVE-2022-45354Public exploitEPSS 38.1%5.3 Medium
- wpchill strong testimonialsWordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-521234.3 Medium
- wp chill download monitorWordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File UploadCVE-2023-340079.9 Critical
- wpchill cpo shortcodesCPO Shortcodes <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-57046.4 Medium
- wp chill download monitorWordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)CVE-2023-312194.1 Medium
- wp chill brillianceWordPress Brilliance Theme <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-281715.4 Medium
- wpchill strong testimonialsWordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-260136.5 Medium
- colorlib activello, newspaper x, cpothemes brilliance +12 more +14 moreEpsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/DeactivationCVE-2020-367216.5 Medium
- kaliforms kali forms, wpchill kali forms — contact form & drag-and-drop builder +1 moreKali Forms <= 2.1.1 - Cross-Site Request ForgeryCVE-2020-367178.8 High
- kaliforms kali forms, wpchill kali forms — contact form & drag-and-drop builder +1 moreKali Forms <= 2.1.1 - Missing Authorization to Settings UpdateCVE-2020-367207.1 High
- kaliforms kali forms, wpchill kali forms — contact form & drag-and-drop builder +1 moreKali Forms <= 2.1.1 - Unauthenticated Arbitrary Post DeletionCVE-2020-367128.6 High
- colorlib activello, bonkers, illdy +14 more +16 moreEpsilon Framework Themes (Various Versions) - Function InjectionCVE-2020-36708Public exploitEPSS 65.3%9.8 Critical
- wpchill cpo content typesWordPress CPO Content Types Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-254515.9 Medium
- machothemes strong testimonialsStrong Testimonials < 3.0.3 - Contributor+ Stored XSS via ShortcodeCVE-2022-47175.4 Medium
- wpchill mashshare, dearhive social media share buttons | mashshare +1 moreMashShare < 3.8.7 - Contributor+ Stored XSSCVE-2022-45445.4 Medium
- machothemes cpo companionCPO Companion <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2023-01625.5 Medium
- wpchill customizable wordpress gallery plugin - modula image gallery, modula image gallery (wordpress plugin) +1 moreWordPress Modula plugin <= 2.6.9 - Unauth. Plugin Settings Change vulnerabilityCVE-2022-411356.5 Medium
- unknown download monitorDownload Monitor < 4.5.98 - Admin+ Arbitrary File DownloadCVE-2022-29814.9 Medium
- wpchill cpo shortcodes, cpo shortcodes (wordpress plugin) +1 moreWordPress CPO Shortcodes plugin <= 1.5.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2022-406724.8 Medium
- wpchill gallery photoblocks, gallery photoblocks (wordpress plugin) +1 moreWordPress Gallery PhotoBlocks plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesCVE-2022-374074.1 Medium
- wpchill gallery photoblocks, gallery photoblocks (wordpress plugin) +1 moreWordPress Gallery PhotoBlocks plugin <= 1.2.6 - Cross-Site Request Forgery (CSRF) vulnerabilitiesCVE-2022-362925.4 Medium
- unknown download monitorDownload Monitor < 4.5.91 - Admin+ Arbitrary File DownloadCVE-2022-22224.9 Medium
- filr project filr, unknown filr – secure document library +1 moreFilr - Secure Document Library < 1.2.2.1 - Subscriber+ AJAX CallsCVE-2022-17778.8 High
- unknown check & log email, wpchill check \& log email +1 moreCheck & Log email < 1.0.6 - Reflected Cross-Site ScriptingCVE-2022-15476.1 Medium
- unknown rsvp and event management plugin, wpchill rsvp and event management +1 moreRSVP and Event Management < 2.7.8 - Unauthenticated Entries ExportCVE-2022-10545.3 Medium
- kb support support, wpchill kb support +1 moreWordPress KB Support plugin <= 1.5.5 - Multiple Unauth. Stored Cross-Site Scripting (XSS) vulnerabilitiesCVE-2022-278526.1 Medium
- Show moreLoading…