A Wp Life

20 CVEs across 13 A Wp Life products. Browse A Wp Life vulnerabilities, severities, and proof-of-concept exploits.

A Wp Life products with known CVEs

ProductCVEs
Contact Form Widget4
Album Gallery – WordPress Gallery2
Blog Filter2
Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery2
Slider Responsive Slideshow – Image Slider, Gallery Slideshow2
Event Management Tickets Booking1
Event Monster – Event Management, Tickets Booking, Upcoming Event1
Login Page Customizer – Customizer Login Page, Admin Page, Custom Design1
Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow1
Modal Popup Box1
Right Click Disable Or Ban1
Video Gallery – API Gallery, Youtube And Vimeo, Link Gallery1
Webenvo1
A Wp Life CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-39589Critical9.92026-06-17Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions.
CVE-2026-39517Medium6.52026-04-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Filter blog-filter allows DOM-Based XSS.Th…
CVE-2026-22346High8.82026-02-20Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow slider-responsive-slideshow allows O…
CVE-2026-22345High8.82026-02-20Deserialization of Untrusted Data vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery new-image-gallery allo…
CVE-2025-68526High8.82026-02-20Deserialization of Untrusted Data vulnerability in A WP Life Modal Popup Box modal-popup-box allows Object Injection.This issue affects Modal Popup Box: from n…
CVE-2025-62134Medium5.42025-12-31Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects C…
CVE-2025-69033Medium6.52025-12-30Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Filter blog-filter allows DOM-Based XSS.Th…
CVE-2025-49902Medium6.52025-12-18Missing Authorization vulnerability in A WP Life Login Page Customizer – Customizer Login Page, Admin Page, Custom Design customizer-login-page allows Exploiti…
CVE-2025-47491High7.42025-05-07Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects C…
CVE-2025-39548High7.12025-04-16Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Right Click Disable OR Ban right-click-disable-or-ban allows Stored XSS.This issue affects Right C…
CVE-2024-48037Medium5.42024-10-17Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects C…
CVE-2024-5059Medium5.32024-06-21Exposure of Sensitive Information to an Unauthorized Actor vulnerability in A WP Life Event Management Tickets Booking.This issue affects Event Management Tick…
CVE-2024-35722Medium4.32024-06-10Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow –…
CVE-2024-35721Medium4.32024-06-10Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery –…
CVE-2024-35720Medium4.32024-06-10Missing Authorization vulnerability in A WP Life Album Gallery – WordPress Gallery.This issue affects Album Gallery – WordPress Gallery: from n/a through 1.5.7.
CVE-2024-35717Medium4.32024-06-10Missing Authorization vulnerability in A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow.This issue affects Media Slider – P…
CVE-2024-34754Medium5.32024-06-03Exposure of Sensitive Information to an Unauthorized Actor vulnerability in A WP Life Contact Form Widget.This issue affects Contact Form Widget: from n/a thro…
CVE-2024-34377Medium4.32024-05-06Missing Authorization vulnerability in A WP Life Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery.This issue affects Video Gallery – Api Gallery, Y…
CVE-2023-47525Medium5.92023-12-21Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Event Monster – Event Management, Tickets Booki…
CVE-2023-23646Medium4.32023-07-17Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Album Gallery – WordPress Gallery plugin <= 1.4.9 versions.