A WP Life

14 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-39517

  WordPress Blog Filter plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Filter blog-filter allows DOM-Based XSS.This issue affects Blog Filter: from n/a through <= 1.7.6.

  A WP Life Blog Filter
  Apr 8, 2026
• Medium 5.4
  CVE-2025-62134

  WordPress Contact Form Widget plugin <= 1.5.1 - Cross Site Request Forgery (CSRF) vulnerability

  Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through <= 1.5.1.

  A WP Life Contact Form Widget
  Dec 31, 2025
• Medium 6.5
  CVE-2025-69033

  WordPress Blog Filter plugin <= 1.7.3 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Filter blog-filter allows DOM-Based XSS.This issue affects Blog Filter: from n/a through <= 1.7.3.

  A WP Life Blog Filter
  Dec 30, 2025
• Medium 6.5
  CVE-2025-49902

  WordPress Login Page Customizer – Customizer Login Page, Admin Page, Custom Design plugin <= 2.1.1 - Broken Access Control vulnerability

  Missing Authorization vulnerability in A WP Life Login Page Customizer – Customizer Login Page, Admin Page, Custom Design customizer-login-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Page Customizer – …

  A WP Life Login Page Customizer – Customizer Login Page, Admin Page, Custom Design
  Dec 18, 2025
• Medium 5.4
  CVE-2024-48037

  WordPress Contact Form Widget plugin <= 1.4.2 - CSRF vulnerability

  Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through <= 1.4.2.

  A WP Life Contact Form Widget
  Oct 17, 2024
• Medium 5.3
  CVE-2024-5059

  WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in A WP Life Event Management Tickets Booking.This issue affects Event Management Tickets Booking: from n/a through 1.4.0.

  A WP Life Event Management Tickets Booking
  Jun 21, 2024
• Medium 4.3
  CVE-2024-35717

  WordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerability

  Missing Authorization vulnerability in A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow.This issue affects Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow: from n/a through 1.3.9.

  A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow
  Jun 10, 2024
• Medium 4.3
  CVE-2024-35720

  WordPress Album Gallery – WordPress Gallery plugin <= 1.5.7 - Broken Access Control vulnerability

  Missing Authorization vulnerability in A WP Life Album Gallery – WordPress Gallery.This issue affects Album Gallery – WordPress Gallery: from n/a through 1.5.7.

  A WP Life Album Gallery – WordPress Gallery Web / CMS
  Jun 10, 2024
• Medium 4.3
  CVE-2024-35721

  WordPress Image Gallery plugin <= 1.4.5 - Broken Access Control vulnerability

  Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through 1.4.5.

  A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery
  Jun 10, 2024
• Medium 4.3
  CVE-2024-35722

  WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability

  Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0.

  A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow
  Jun 10, 2024
• Medium 5.3
  CVE-2024-34754

  WordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerability

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in A WP Life Contact Form Widget.This issue affects Contact Form Widget: from n/a through 1.3.9.

  A WP Life Contact Form Widget
  Jun 3, 2024
• Medium 4.3
  CVE-2024-34377

  WordPress Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugin <= 1.5.3 - Broken Access Control vulnerability

  Missing Authorization vulnerability in A WP Life Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery.This issue affects Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery: from n/a through 1.5.3.

  A WP Life Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery
  May 6, 2024
• Medium 5.9
  CVE-2023-47525

  WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Event Monster – Event Management, Tickets Booking, Upcoming Event allows Stored XSS.This issue affects Event Monster – Event Management, Tickets Bo…

  A WP Life Event Monster – Event Management, Tickets Booking, Upcoming Event
  Dec 21, 2023
• Medium 4.3
  CVE-2023-23646

  WordPress Album Gallery – WordPress Gallery Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)

  Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Album Gallery – WordPress Gallery plugin <= 1.4.9 versions.

  A WP Life Album Gallery – WordPress Gallery Web / CMS
  Jul 17, 2023