Vendor

    WPChill

    92 known vulnerabilities in products by WPChill, 0 of them actively exploited (CISA KEV).

    Key figures

    92

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WPChill
    CriticalCVE-2026-3584

    Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process

    		9.8
    CriticalCVE-2020-36708

    Epsilon Framework Themes (Various Versions) - Function Injection

    also in 7 other products

    		9.8
    HighCVE-2021-24786

    Download Monitor < 4.4.5 - Admin+ SQL Injection

    		7.2
    HighCVE-2022-45354

    WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure

    		5.3
    HighCVE-2026-16144

    Kali Forms <= 2.4.20 - Unauthenticated Remote Code Execution via 'thisPermalink' Field Parameter

    		8.1
    MediumCVE-2021-23174

    WPChill Download Monitor: Cross-site Scripting

    		3.4
    MediumCVE-2022-1054

    RSVP and Event Management < 2.7.8 - Unauthenticated Entries Export

    		5.3
    HighCVE-2025-13645

    Modula 2.13.1 - 2.13.2 - Authenticated (Author+) Arbitrary File Deletion

    		7.2
    CriticalCVE-2023-34007

    WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload

    		9.9
    MediumCVE-2020-8549

    Strong Testimonials: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2024-12853

    Modula Image Gallery <= 2.11.10 - Authenticated (Author+) Arbitrary File Upload

    		8.8
    MediumCVE-2021-31567

    WordPress Download Monitor plugin <= 4.4.6 - Authenticated Arbitrary File Download vulnerability

    		6.8
    HighCVE-2021-24774

    Check & Log Email < 1.0.3 - Admin+ SQL Injections

    		7.2
    HighCVE-2025-13646

    Modula 2.13.1 - 2.13.2 - Authenticated (Author+) Arbitrary File Upload via Race Condition

    		7.5
    HighCVE-2026-89406

    WPChill Modula Image Gallery: Missing Authorization

    		7.5
    HighCVE-2026-107659

    WPChill Modula Image Gallery: Missing Authorization

    		7.5
    HighCVE-2026-92713

    WPChill Modula Image Gallery: Missing Authorization

    		8.1
    HighCVE-2020-36712

    Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletion

    also in 1 other product

    		8.6
    HighCVE-2026-115811

    WPChill Strong Testimonials: Cross-site Scripting

    		7.2
    HighCVE-2026-100182

    WPChill Download Monitor: Cross-site Scripting

    		7.2
    HighCVE-2026-15395

    WPChill Kali Forms: Cross-site Scripting

    		7.2
    MediumCVE-2026-121976

    WPChill Modula Image Gallery: Cross-site Scripting

    		6.4
    MediumCVE-2020-36721

    Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation

    also in 7 other products

    		6.5
    MediumCVE-2026-125409

    WPChill Passster: Cross-site Scripting

    		6.4
    HighCVE-2026-96650

    WPChill Strong Testimonials: Cross-site Scripting

    		7.2

    All vulnerabilities in search

    Products

    Products by WPChill
    Download Monitor250
    Strong Testimonials160
    Kali Forms — Contact Form & Drag-and-drop Builder100
    Modula Image Gallery – Photo Grid & Video Gallery100
    Image Photo Gallery Final Tiles Grid70
    Passster – Password Protect Pages And Content60
    Image Gallery50
    WPChill Remove Footer Credit40
    Brilliance30
    Check \& Log Email30
    CPO Shortcodes30
    Passster30
    Simple Restrict30
    WPChill Gallery PhotoBlocks (WordPress plugin)30