Vulnerabilities > Wpchill

DATE CVE VULNERABILITY TITLE RISK
2023-11-13 CVE-2023-31219 Server-Side Request Forgery (SSRF) vulnerability in Wpchill Download Monitor
Server-Side Request Forgery (SSRF) vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.1.
network
low complexity
wpchill CWE-918
4.9
2023-06-22 CVE-2023-28171 Cross-site Scripting vulnerability in Wpchill Brilliance 1.3.1
Auth.
network
low complexity
wpchill CWE-79
5.4
2023-06-16 CVE-2023-26013 Cross-site Scripting vulnerability in Wpchill Strong Testimonials
Auth.
network
low complexity
wpchill CWE-79
5.4
2023-04-23 CVE-2023-25451 Cross-site Scripting vulnerability in Wpchill CPO Content Types
Auth.
network
low complexity
wpchill CWE-79
4.8
2023-01-16 CVE-2022-4544 Unspecified vulnerability in Wpchill Mashshare
The MashShare WordPress plugin before 3.8.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
network
low complexity
wpchill
5.4
2022-11-18 CVE-2022-41135 Unspecified vulnerability in Wpchill Customizable Wordpress Gallery Plugin - Modula Image Gallery
Unauth.
network
low complexity
wpchill
5.3
2022-10-10 CVE-2022-2981 Files or Directories Accessible to External Parties vulnerability in Wpchill Download Monitor
The Download Monitor WordPress plugin before 4.5.98 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup.
network
low complexity
wpchill CWE-552
4.9
2022-09-23 CVE-2022-40672 Cross-site Scripting vulnerability in Wpchill CPO Shortcodes
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CPO Shortcodes plugin <= 1.5.0 at WordPress.
network
low complexity
wpchill CWE-79
4.8
2022-09-09 CVE-2022-37407 Cross-site Scripting vulnerability in Wpchill Gallery Photoblocks 1.2.6
Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress.
network
low complexity
wpchill CWE-79
5.4
2022-08-23 CVE-2022-36292 Cross-Site Request Forgery (CSRF) vulnerability in Wpchill Gallery Photoblocks 1.2.6
Cross-Site Request Forgery (CSRF) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress.
network
low complexity
wpchill CWE-352
8.8