Vulnerabilities in WP Chill

37 results
Vexday analysis

WP Chill apresenta 33 vulnerabilidades catalogadas, com 5 publicadas nos últimos 90 dias, indicando atividade contínua de descoberta. Nenhuma vulnerabilidade está sob ataque ativo conhecido (KEV) e não há críticas de CVSS máximo, reduzindo o risco imediato. A fraqueza dominante é insuficiência de controle de acesso (CWE-862), sugerindo problemas recorrentes na autorização de operações.

CVE-2026-39536MEDIUMWordPress RSVP and Event Management plugin <= 2.7.16 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-25375MEDIUMWordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-42688MEDIUMWordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-27398MEDIUMWordPress RSVP and Event Management plugin <= 2.7.16 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-59551MEDIUMWordPress Revive.so Plugin <= 2.0.6 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2026-28133HIGHWordPress Filr plugin <= 1.2.14 - Arbitrary File Upload vulnerabilityEPSS 0.2%CVE-2025-57926MEDIUMWordPress Passster Plugin <= 4.2.18 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-27424MEDIUMWordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-58610MEDIUMWordPress Gallery PhotoBlocks Plugin <= 1.3.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-39510LOWWordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-24939MEDIUMWordPress Modula Image Gallery plugin <= 2.13.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-39561MEDIUMWordPress Revive.so plugin <= 2.0.7 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-23976MEDIUMWordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-65446HIGHWordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-65475MEDIUMWordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-66448MEDIUMWordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-24389MEDIUMWordPress Gallery PhotoBlocks plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%