Wpdiscover
8 CVEs across 6 Wpdiscover products. Browse Wpdiscover vulnerabilities, severities, and proof-of-concept exploits.
Wpdiscover products with known CVEs
Wpdiscover CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-69384 | High | 7.1 | 2026-02-20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdiscover Timeline Event History timeline-event-history… |
CVE-2026-1127 | Medium | 6.1 | 2026-01-24 | The Timeline Event History plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `id` parameter in all versions up to, and including, 3… |
CVE-2025-62130 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in wpdiscover Accordion Slider Gallery accordion-slider-gallery allows Exploiting Incorrectly Configured Access Control Sec… |
CVE-2025-13896 | Medium | 6.4 | 2025-12-06 | The Social Feed Gallery Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the [igp-wp] shortcode in all ver… |
CVE-2025-46517 | Medium | 5.9 | 2025-04-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdiscover Blog Manager WP blog-manager-wp allows Stored… |
CVE-2025-31595 | Medium | 6.5 | 2025-03-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdiscover Timeline Event History timeline-event-history… |
CVE-2024-49325 | Medium | 4.3 | 2024-10-20 | Missing Authorization vulnerability in wpdiscover Photo Gallery Builder photo-gallery-builder allows Accessing Functionality Not Properly Constrained by ACLs.T… |
CVE-2024-5726 | High | 8.8 | 2024-07-18 | The Timeline Event History plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1 via deserialization of untruste… |