Skip to content
OpenAdvisories

Vendor

westerndeal

12 known vulnerabilities.

Products

GSheetConnector for Gravity Forms – Send Gravity Forms Entries to Google Sheets in Real-Time 2 WPForms Google Sheet Connector 2 WooCommerce Google Sheet Connector 1 Advanced Dewplayer 1 GSheetConnector – CF7 Google Sheets Connector 1 GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time 1 GSheetConnector For Ninja Forms 1 CF7 Google Sheets Connector 1 GSheetConnector for Forminator Forms 1 GSheetConnector for WooCommerce – Send your Orders and Products to Google Sheet in Real-Time 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-16614

    GSheetConnector <= 5.2.1 - Authenticated (Administrator+) SQL Injection via 's' Parameter

    The GSheetConnector – CF7 Google Sheets Connector with Real-Time Sync plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 5.2.1 due to insufficient escaping on the user supplied parameter and…

    westerndeal GSheetConnector – CF7 Google Sheets Connector Web / CMS
  • Medium 5.3
    CVE-2025-67570

    WordPress WPForms Google Sheet Connector plugin <= 4.0.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WesternDeal WPForms Google Sheet Connector gsheetconnector-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPForms Google Sheet Connector: from n/a through <= 4.0.0.

    westerndeal WPForms Google Sheet Connector
  • Medium 4.3
    CVE-2025-13136

    GSheetConnector For Ninja Forms <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) System Information Exposure

    The GSheetConnector For Ninja Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'njform-google-sheet-config ' page in all versions up to, and including, 2.0.1. This makes it possible for authentic…

    westerndeal GSheetConnector For Ninja Forms Web / CMS
  • Medium 4.3
    CVE-2025-54030

    WordPress WooCommerce Google Sheet Connector plugin <= 1.3.20 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WesternDeal WooCommerce Google Sheet Connector wc-gsheetconnector allows Cross Site Request Forgery.This issue affects WooCommerce Google Sheet Connector: from n/a through <= 1.3.20.

    westerndeal WooCommerce Google Sheet Connector Web / CMS
  • Medium 5.3
    CVE-2025-30592

    WordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control Vulnerability

    Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through <= 1.6.

    westerndeal Advanced Dewplayer
  • Medium 5.3
    CVE-2025-22686

    WordPress CF7 Google Sheets Connector plugin <= 5.0.17 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WesternDeal CF7 Google Sheets Connector cf7-google-sheets-connector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CF7 Google Sheets Connector: from n/a through <= 5.0.17.

    westerndeal CF7 Google Sheets Connector
  • Medium 6.5
    CVE-2024-5654

    CF7 Google Sheets Connector <= 5.0.9 - Missing Authorization to Limited Site Configuration Update

    The CF7 Google Sheets Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'execute_post_data_cg7_free' function in all versions up to, and including, 5.0.9. This makes it possible for unau…

    westerndeal GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time Web / CMS
  • Medium 5.3
    CVE-2024-1562

    WooCommerce Google Sheet Connector <= 1.3.11 - Missing Authorization

    The WooCommerce Google Sheet Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the execute_post_data function in all versions up to, and including, 1.3.11. This makes it possible for unauthe…

    westerndeal GSheetConnector for WooCommerce – Send your Orders and Products to Google Sheet in Real-Time Web / CMS