Skip to content
OpenAdvisories

Vendor

wpchill

70 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-3584 Public exploit

    Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process

    The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the 'form_process' function. This is due to the 'prepare_post_data' function mapping user-supplied keys directly into internal placehold…

  • Medium 5.3
    CVE-2022-45354 Public exploit EPSS 38%

    WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60.

  • Critical 9.8
    CVE-2020-36708 Public exploit EPSS 65%

    Epsilon Framework Themes (Various Versions) - Function Injection

    The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.…