Vendor

    Wp Chill

    59 known vulnerabilities in products by Wp Chill, 0 of them actively exploited (CISA KEV).

    Key figures

    59

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Wp Chill
    HighCVE-2026-107436

    WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability

    8.8
    HighCVE-2025-47439

    WordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion Vulnerability

    7.5
    HighCVE-2026-59542

    WordPress Kali Forms plugin <= 2.4.18 - Arbitrary File Deletion vulnerability

    7.7
    HighCVE-2026-39481

    WordPress Modula Image Gallery plugin <= 2.14.18 - PHP Object Injection vulnerability

    7.2
    HighCVE-2026-121570

    WordPress RSVP and Event Management plugin <= 2.7.17 - Cross Site Scripting (XSS) vulnerability

    7.1
    HighCVE-2026-107435

    WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

    7.1
    HighCVE-2025-24683

    WordPress RSVP and Event Management Plugin <= 2.7.14 - SQL Injection vulnerability

    7.6
    MediumCVE-2026-125454

    WordPress Passster plugin <= 4.3.21 - Cross Site Scripting (XSS) vulnerability

    6.5
    MediumCVE-2026-121028

    WordPress Strong Testimonials plugin <= 3.3.17 - Content Injection vulnerability

    5.3
    MediumCVE-2026-116408

    WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

    6.5
    MediumCVE-2026-114710

    WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

    6.5
    MediumCVE-2026-110375

    WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

    6.5
    MediumCVE-2026-114706

    WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerability

    6.5
    MediumCVE-2026-121776

    WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability

    6.5
    MediumCVE-2026-121574

    WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability

    5.3
    HighCVE-2026-39486

    WordPress Download Monitor plugin <= 5.1.8 - SQL Injection vulnerability

    8.5
    MediumCVE-2026-104409

    WP Chill Image Photo Gallery Final Tiles Grid: Cross-site Scripting

    6.5
    HighCVE-2025-64230

    WordPress Filr plugin <= 1.2.10 - Arbitrary File Deletion vulnerability

    7.7
    MediumCVE-2026-97286

    WordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability

    6.5
    HighCVE-2026-28133

    WordPress Filr plugin <= 1.2.14 - Arbitrary File Upload vulnerability

    8.5
    HighCVE-2026-65446

    WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerability

    7.1
    MediumCVE-2026-110896

    WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability

    5.3
    MediumCVE-2026-109897

    WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability

    5.4
    MediumCVE-2026-84781

    WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

    6.5
    HighCVE-2025-64218

    WordPress Passster plugin <= 4.2.19 - Sensitive Data Exposure vulnerability

    7.5

    All vulnerabilities in search

    Products