Gdragon

5 CVEs across 4 Gdragon products. Browse Gdragon vulnerabilities, severities, and proof-of-concept exploits.

Gdragon products with known CVEs

ProductCVEs
Coreactivity: Activity Logging For WordPress2
Gd Bbpress Attachments1
Gd Mail Queue1
Gd Rating System1
Gdragon CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-7635High8.12026-05-13The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0. This is…
CVE-2025-3436Medium6.52025-04-08The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'order' and 'orderby' parameters in all versions u…
CVE-2024-11278Medium6.12024-11-20The GD bbPress Attachments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on…
CVE-2024-11198Medium6.42024-11-19The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘extra_class’ parameter in all versions up to, and including, 3…
CVE-2023-3122High7.22023-07-12The GD Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 3.9.3 due to insuffici…