Skip to content
OpenAdvisories

Vendor

gdragon

6 known vulnerabilities.

Products

GD Rating System 2 coreActivity: Activity Logging for WordPress 2 GD bbPress Attachments 1 GD Mail Queue 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-93430

    GD Rating System <= 3.7.1 - Unauthenticated Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX

    The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This ma…

    gdragon GD Rating System Web / CMS
  • High 8.1
    CVE-2026-7635

    coreActivity: Activity Logging for WordPress <= 3.0 - Unauthenticated PHP Object Injection via 'user_agent' Log Meta Field

    The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0. This is due to the plugin failing to validate or strip PHP serialization syntax from the User-Agent HTTP hea…

    gdragon coreActivity: Activity Logging for WordPress Web / CMS
  • High 7.2
    CVE-2023-3122

    GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Email

    The GD Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 3.9.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to …

    gdragon GD Mail Queue Web / CMS