Grandplugins

4 CVEs across 5 Grandplugins products. Browse Grandplugins vulnerabilities, severities, and proof-of-concept exploits.

Grandplugins products with known CVEs

ProductCVEs
Avif Uploader1
Avif Uploader1
Direct Checkout – Quick View – Buy Now For Woocommerce1
Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes1
Woo Quick View And Buy Now1
Grandplugins CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-49973Medium4.32025-06-20Missing Authorization vulnerability in GrandPlugins Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes image-sizes-controller allows Exploi…
CVE-2024-9238Medium5.42025-05-15The AVIF Uploader WordPress plugin before 1.1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a maliciou…
CVE-2024-9060Medium6.42024-10-01The AVIF & SVG Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in version 1.1.0 due to insufficient input sanit…
CVE-2023-47657Medium5.92023-11-14Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin <= 1.5.8 ver…