Milan Petrovic

9 CVEs across 5 Milan Petrovic products. Browse Milan Petrovic vulnerabilities, severities, and proof-of-concept exploits.

Milan Petrovic products with known CVEs

ProductCVEs
Gd Rating System3
Gd Security Headers3
Gd Bbpress Attachments1
Gd Bbpress Tools1
Gd Mail Queue1
Milan Petrovic CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57771High8.52026-07-13Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Rating System gd-rating-system allows B…
CVE-2026-57403High7.12026-07-13Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Security Headers gd-security-headers al…
CVE-2025-58002Medium6.52025-09-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD bbPress Tools gd-bbpress-tools allows D…
CVE-2025-24608High7.12025-01-31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Mail Queue gd-mail-queue allows Reflect…
CVE-2024-38709Medium5.32024-07-12Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Milan Petrovic GD Rating System allows PHP Local File Inclusion…
CVE-2024-25093High7.12024-02-29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Rating System allows Stored XSS.This is…
CVE-2023-46821High7.62023-11-06Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Security Headers allows auth. (admin+)…
CVE-2023-40330High7.12023-09-27Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Milan Petrovic GD Security Headers plugin <= 1.6.1 versions.
CVE-2022-45816Medium4.82022-12-06Auth. Stored Cross-Site Scripting (XSS) vulnerability in GD bbPress Attachments plugin <= 4.3.1 on WordPress.