Wp Chill
37 CVEs across 13 Wp Chill products. Browse Wp Chill vulnerabilities, severities, and proof-of-concept exploits.
Wp Chill products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-65446 | High | 7.1 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions. |
CVE-2026-66448 | Medium | 6.5 | 2026-07-27 | Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions. |
CVE-2026-65475 | Medium | 6.5 | 2026-07-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This is… |
CVE-2026-59542 | High | 7.7 | 2026-07-23 | Subscriber Arbitrary File Deletion in Kali Forms <= 2.4.18 versions. |
CVE-2026-42688 | Medium | 6.5 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions. |
CVE-2026-39489 | Medium | 4.4 | 2026-06-15 | Author Arbitrary File Download in Download Monitor <= 5.1.9 versions. |
CVE-2026-39481 | High | 7.2 | 2026-06-15 | Author PHP Object Injection in Modula Image Gallery <= 2.14.18 versions. |
CVE-2026-27398 | Medium | 5.3 | 2026-05-25 | Missing Authorization vulnerability in WP Chill RSVP and Event Management allows Exploiting Incorrectly Configured Access Control Security Levels. This issue… |
CVE-2026-27424 | Medium | 4.3 | 2026-05-20 | Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. … |
CVE-2026-39561 | Medium | 5.3 | 2026-04-08 | Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2026-39536 | Medium | 5.3 | 2026-04-08 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Se… |
CVE-2026-39510 | Low | 2.7 | 2026-04-08 | Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting… |
CVE-2026-39486 | High | 8.5 | 2026-04-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill Download Monitor download-monitor allows Blind S… |
CVE-2026-28133 | High | 8.5 | 2026-03-05 | Unrestricted Upload of File with Dangerous Type vulnerability in WP Chill Filr filr-protection allows Upload a Web Shell to a Web Server.This issue affects Fil… |
CVE-2026-25375 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Acc… |
CVE-2026-25036 | Medium | 6.5 | 2026-02-03 | Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2026-24957 | Medium | 6.5 | 2026-02-03 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2026-24939 | Medium | 4.3 | 2026-02-03 | Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2026-24389 | Medium | 6.5 | 2026-01-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery all… |
CVE-2026-23976 | Medium | 5.9 | 2026-01-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery al… |
CVE-2025-64230 | High | 7.7 | 2025-12-18 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Chill Filr filr-protection allows Path Traversal.This issue… |
CVE-2025-64218 | High | 7.5 | 2025-12-18 | Insertion of Sensitive Information Into Sent Data vulnerability in WP Chill Passster content-protector allows Retrieve Embedded Sensitive Data.This issue affec… |
CVE-2025-59551 | Medium | 4.3 | 2025-09-22 | Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-57926 | Medium | 6.5 | 2025-09-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Passster content-protector allows Stored XSS.Thi… |
CVE-2025-58610 | Medium | 6.5 | 2025-09-03 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery all… |
CVE-2025-47439 | High | 7.5 | 2025-05-07 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Chill Download Monitor download-mon… |
CVE-2025-32233 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-26975 | Medium | 5.3 | 2025-02-25 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Accessing Functionality Not Properly Constrained by ACLs.This is… |
CVE-2025-24683 | High | 7.6 | 2025-01-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill RSVP and Event Management rsvp allows SQL Inject… |
CVE-2025-22773 | Medium | 5.3 | 2025-01-15 | Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Expl… |
CVE-2023-46083 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-45275 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2024-49256 | Medium | 5.4 | 2024-11-01 | Incorrect Authorization vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Accessing Functionality Not Properly Constrained by ACLs.Thi… |
CVE-2024-47362 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials.This issue affects Strong Testimonials: from n/a through <= 3.1.16. |
CVE-2024-43329 | Medium | 6.5 | 2024-08-18 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Chill Allegiant allegiant allows Stored XSS.Thi… |
CVE-2024-43216 | Medium | 6.5 | 2024-08-12 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Filr filr-protection.This issue affects Filr: fr… |
CVE-2023-28171 | Medium | 5.4 | 2023-06-22 | Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in WP Chill Brilliance theme <= 1.3.1 versions. |