Gdragon
5 CVEs across 4 Gdragon products. Browse Gdragon vulnerabilities, severities, and proof-of-concept exploits.
Gdragon products with known CVEs
Gdragon CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-7635 | High | 8.1 | 2026-05-13 | The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0. This is… |
CVE-2025-3436 | Medium | 6.5 | 2025-04-08 | The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'order' and 'orderby' parameters in all versions u… |
CVE-2024-11278 | Medium | 6.1 | 2024-11-20 | The GD bbPress Attachments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on… |
CVE-2024-11198 | Medium | 6.4 | 2024-11-19 | The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘extra_class’ parameter in all versions up to, and including, 3… |
CVE-2023-3122 | High | 7.2 | 2023-07-12 | The GD Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 3.9.3 due to insuffici… |