# cve.now: Gopiplus

The newest entries naming Gopiplus as an affected vendor (up to 200), of 30 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-42713](https://cve.now/CVE-2026-42713.md): WordPress Post title marquee scroll plugin \<= 9.9 - SQL Injection vulnerability (CVSS 7.6)
- [CVE-2025-9199](https://cve.now/CVE-2025-9199.md): Woo superb slideshow transition gallery with random effect \<= 9.1 - Authenticated (Contributor+) SQL Injection (CVSS 6.5)
- [CVE-2025-58881](https://cve.now/CVE-2025-58881.md): WordPress New Simple Gallery Plugin \<= 8.0 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-49897](https://cve.now/CVE-2025-49897.md): WordPress Vertical scroll slideshow gallery v2 plugin \<= 9.1 - SQL Injection vulnerability (CVSS 8.8)
- [CVE-2025-5752](https://cve.now/CVE-2025-5752.md): Vertical scroll image slideshow gallery \<= 11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter (CVSS 6.4)
- [CVE-2025-30983](https://cve.now/CVE-2025-30983.md): WordPress Card flip image slideshow plugin \<= 1.5 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-30979](https://cve.now/CVE-2025-30979.md): WordPress Pixelating image slideshow gallery plugin \<= 8.0 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-30969](https://cve.now/CVE-2025-30969.md): WordPress iFrame Images Gallery plugin \<= 9.0 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-30947](https://cve.now/CVE-2025-30947.md): WordPress Cool fade popup plugin \<= 10.1 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-5590](https://cve.now/CVE-2025-5590.md): Owl carousel responsive \<= 1.9 - Authenticated (Contributor+) SQL Injection via id Parameter (CVSS 8.8)
- [CVE-2025-30533](https://cve.now/CVE-2025-30533.md): WordPress Message ticker plugin \<= 9.3 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9)
- [CVE-2024-11884](https://cve.now/CVE-2024-11884.md): Wp photo text slider 50 \<= 8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-11442](https://cve.now/CVE-2024-11442.md): Horizontal scroll image slideshow \<= 10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-52492](https://cve.now/CVE-2024-52492.md): WordPress Image horizontal reel scroll slideshow plugin \<= 13.4 - Stored Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-51914](https://cve.now/CVE-2024-51914.md): WordPress drop in image slideshow gallery plugin \<= 12.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-51716](https://cve.now/CVE-2024-51716.md): WordPress Twitter real time search scrolling plugin \<= 7.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2023-5000](https://cve.now/CVE-2023-5000.md): Horizontal scrolling announcements \<= 2.4 - Authenticated (Contributor+) SQL Injection via Shortcode (CVSS 8.8)
- [CVE-2023-5413](https://cve.now/CVE-2023-5413.md): Image horizontal reel scroll slideshow \<= 13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)
- [CVE-2023-5433](https://cve.now/CVE-2023-5433.md): Message ticker \<= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8)
- [CVE-2023-5437](https://cve.now/CVE-2023-5437.md): WP fade in text news \<= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8)
- [CVE-2023-5438](https://cve.now/CVE-2023-5438.md): wp image slideshow \<= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8)
- [CVE-2023-5431](https://cve.now/CVE-2023-5431.md): Left right image slideshow gallery \<= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8)
- [CVE-2023-5429](https://cve.now/CVE-2023-5429.md): Information Reel \<= 10.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8)
- [CVE-2023-5439](https://cve.now/CVE-2023-5439.md): Wp photo text slider 50 \<= 8.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8)
- [CVE-2023-5434](https://cve.now/CVE-2023-5434.md): Superb slideshow gallery \<= 13.1 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8)
- [CVE-2023-5435](https://cve.now/CVE-2023-5435.md): Up down image slideshow gallery \<= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8)
- [CVE-2023-5412](https://cve.now/CVE-2023-5412.md): Image horizontal reel scroll slideshow \<= 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8)
- [CVE-2023-5428](https://cve.now/CVE-2023-5428.md): Image vertical reel scroll slideshow \<= 9.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8)
- [CVE-2023-4999](https://cve.now/CVE-2023-4999.md): Horizontal scrolling announcement \<= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8)
- [CVE-2023-5001](https://cve.now/CVE-2023-5001.md): Horizontal scrolling announcement \<= 9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/gopiplus
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.