Awordpresslife
14 CVEs across 12 Awordpresslife products. Browse Awordpresslife vulnerabilities, severities, and proof-of-concept exploits.
Awordpresslife products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-8608 | Medium | 5.3 | 2026-06-06 | The Event Monster – Event Management, Events Calendar, Tickets plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions… |
CVE-2025-49274 | High | 7.1 | 2025-07-04 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in awordpresslife Neom Blog neom-blog allows Reflected XSS.T… |
CVE-2024-13833 | High | 7.2 | 2025-03-01 | The Album Gallery – WordPress Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.3 via deserializatio… |
CVE-2024-11396 | Medium | 5.3 | 2025-01-14 | The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to Information Exposure in all versions up to, and inc… |
CVE-2024-6262 | Medium | 6.4 | 2024-06-27 | The Portfolio Gallery – Image Gallery Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'PFG' shortcode in all versions… |
CVE-2024-5638 | Medium | 6.1 | 2024-06-08 | The Formula theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in the 'ti_customizer_notify_dismiss_recommended_plugins… |
CVE-2024-5613 | Medium | 6.1 | 2024-06-08 | The Formula theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in the 'quality_customizer_notify_dismiss_action' AJAX a… |
CVE-2024-1897 | High | 7.5 | 2024-05-02 | The Grid Gallery – Photo Image Grid Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.3 via deserial… |
CVE-2024-1896 | High | 7.5 | 2024-05-02 | The Photo Gallery – Responsive Photo Gallery, Image Gallery, Portfolio Gallery, Logo Gallery And Team Gallery plugin for WordPress is vulnerable to PHP Object… |
CVE-2024-1895 | High | 7.5 | 2024-04-30 | The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and inc… |
CVE-2024-2008 | High | 8.8 | 2024-04-04 | The Modal Popup Box – Popup Builder, Show Offers And News in Popup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and includ… |
CVE-2024-1859 | High | 8.8 | 2024-03-01 | The Slider Responsive Slideshow – Image slider, Gallery slideshow plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and includi… |
CVE-2024-1475 | Medium | 5.3 | 2024-02-29 | The Coming Soon Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the REST… |
CVE-2023-5291 | Medium | 6.4 | 2023-10-04 | The Blog Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'AWL-BlogFilter' shortcode in versions up to, and including, 1.5.3 due to… |