WP Chill vulnerabilities
55 CVEs and advisories name WP Chill as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-39486WordPress Download Monitor plugin <= 5.1.8 - SQL Injection vulnerability
- CVE-2026-28133WordPress Filr plugin <= 1.2.14 - Arbitrary File Upload vulnerability
- CVE-2026-25375WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerability
- CVE-2026-25036WordPress Passster plugin <= 4.2.25 - Broken Access Control vulnerability
- CVE-2026-24957WordPress Strong Testimonials plugin <= 3.2.20 - Broken Access Control vulnerability
- CVE-2026-24939WordPress Modula Image Gallery plugin <= 2.13.6 - Broken Access Control vulnerability
- CVE-2026-24389WordPress Gallery PhotoBlocks plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-23976WordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-64230WordPress Filr plugin <= 1.2.10 - Arbitrary File Deletion vulnerability
- CVE-2025-64218WordPress Passster plugin <= 4.2.19 - Sensitive Data Exposure vulnerability
- CVE-2025-59551WordPress Revive.so Plugin <= 2.0.6 - Broken Access Control Vulnerability
- CVE-2025-57926WordPress Passster Plugin <= 4.2.18 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-58610WordPress Gallery PhotoBlocks Plugin <= 1.3.1 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-47439WordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion Vulnerability
- CVE-2025-32233WordPress Revive.so plugin <= 2.0.3 - Broken Access Control vulnerability
- CVE-2025-26975WordPress Strong Testimonials plugin <= 3.2.3 - Broken Access Control vulnerability
- CVE-2025-24683WordPress RSVP and Event Management Plugin <= 2.7.14 - SQL Injection vulnerability
- CVE-2025-22773WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability
- CVE-2023-46083WordPress Kali Forms plugin <= 2.3.27 - Broken Access Control vulnerability
- CVE-2023-45275WordPress Contact Form builder with drag & drop plugin <= 2.3.28 - Broken Access Control vulnerability
- CVE-2024-49256WordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerability
- CVE-2024-47362WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerability
- CVE-2024-43329WordPress Allegiant theme <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43216WordPress Filr plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2023-28171WordPress Brilliance Theme <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)