Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Coreactivity HIGH 8.8
CVE-2024-0852

The coreActivity: Activity Logging for WordPress plugin before 1.8.1 does not escape some request data when outputting it back in the admin dashboard…

Fix: 1.8.1+
Fix from $1,950 2025-05-15
Coreactivity MEDIUM 5.3
CVE-2024-0868

The coreActivity: Activity Logging plugin for WordPress plugin before 2.1 retrieved IP addresses of requests via headers such X-FORWARDED to log them…

Fix: 2.1+
Fix from $1,600 2024-04-17
Gd Rating System MEDIUM 6.1
CVE-2024-25093

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Rating System allows Stored X…

Fix: 3.5.1+
Fix from $1,600 2024-02-29
Gd Security Headers HIGH 7.2
CVE-2023-46821

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Security Headers allows auth.…

Fix: after 1.7
Fix from $1,950 2023-11-06
Gd Security Headers MEDIUM 6.1
CVE-2023-40330

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Milan Petrovic GD Security Headers plugin <= 1.6.1 versions.

Fix: after 1.6.1
Fix from $1,600 2023-09-27
Gd Mail Queue MEDIUM 6.1
CVE-2023-3122

The GD Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 3.9.3 due to…

Fix: after 3.9.3
Fix from $1,600 2023-07-12
Gd Bbpress Attachments MEDIUM 5.4
CVE-2022-45816

Auth. Stored Cross-Site Scripting (XSS) vulnerability in GD bbPress Attachments plugin <= 4.3.1 on WordPress.

Fix: after 4.3.1
Fix from $1,600 2022-12-06
Gd Rating System MEDIUM 6.1
CVE-2017-18591

The gd-rating-system plugin before 2.1 for WordPress has XSS in log.php.

Fix: 2.1+
Fix from $1,600 2019-08-27
Gd Star Rating HIGH 7.5
CVE-2014-2839

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s…

Mitigation only
Fix from $1,950 2015-01-12
Gd Star Rating MEDIUM 6.8
CVE-2014-2838

Multiple cross-site request forgery (CSRF) vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the auth…

No fix yet
Fix from $1,600 2015-01-12