WP Chill vulnerabilities
55 CVEs and advisories name WP Chill as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-121570WordPress RSVP and Event Management plugin <= 2.7.17 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-114706WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-116408WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-114710WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-112843WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability
- CVE-2026-107435WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-107436WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability
- CVE-2026-110896WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability
- CVE-2026-110375WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-109897WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability
- CVE-2026-110371WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability
- CVE-2026-109896WordPress Download Monitor integration for WooCommerce plugin <= 1.0.3 - Broken Access Control vulnerability
- CVE-2026-105876WordPress Modula Image Gallery plugin <= 3.0.11 - Sensitive Data Exposure vulnerability
- CVE-2026-104409WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-97286WordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-62114WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability
- CVE-2026-84781WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-81276WordPress Kali Forms plugin <= 2.4.23 - Broken Access Control vulnerability
- CVE-2026-65446WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-66448WordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-65475WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-59542WordPress Kali Forms plugin <= 2.4.18 - Arbitrary File Deletion vulnerability
- CVE-2026-42688WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-39489WordPress Download Monitor plugin <= 5.1.9 - Non-Arbitrary File Download vulnerability
- CVE-2026-39481WordPress Modula Image Gallery plugin <= 2.14.18 - PHP Object Injection vulnerability
- CVE-2026-27398WordPress RSVP and Event Management plugin <= 2.7.16 - Broken Access Control vulnerability
- CVE-2026-27424WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability
- CVE-2026-39561WordPress Revive.so plugin <= 2.0.7 - Broken Access Control vulnerability
- CVE-2026-39536WordPress RSVP and Event Management plugin <= 2.7.16 - Sensitive Data Exposure vulnerability
- CVE-2026-39510WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerability