Skip to content
OpenAdvisories

Vendor

WP Chill

128 known vulnerabilities.

Products

Strong Testimonials 21 Download Monitor 17 Kali Forms — Contact Form & Drag-and-Drop Builder 10 Modula Image Gallery – Photo Grid & Video Gallery 10 Image Photo Gallery Final Tiles Grid 9 Passster 7 Modula Image Gallery 6 Gallery PhotoBlocks 6 RSVP and Event Management 5 Kali Forms 5 Passster – Password Protect Pages and Content 4 Brilliance 3 Revive.so 3 Filr 3 Allegiant 2 Image Gallery – Photo Grid & Video Gallery 2 Simple Restrict 2 Htaccess File Editor 2 Gallery PhotoBlocks (WordPress plugin) 2 Remove Footer Credit 1 Affluent 1 Transcend 1 Qyrr – simply and modern QR-Code creation 1 Filr – Secure document library 1 Download Monitor (WordPress plugin) 1 CPO Shortcodes (WordPress plugin) 1 CPO Shortcodes 1 Modula Image Gallery (WordPress plugin) 1 CPO Companion 1 Download Monitor integration for WooCommerce 1 CPO Content Types 1
All Critical High Medium Low Exploited only Public exploit

93 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-52123

    WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10.

    WP Chill Strong Testimonials
  • Medium 6.4
    CVE-2023-5704

    CPO Shortcodes <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The CPO Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it …

    WP Chill CPO Shortcodes Web / CMS
  • Medium 4.1
    CVE-2023-31219

    WordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)

    Server-Side Request Forgery (SSRF) vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.1.

    WP Chill Download Monitor
  • Medium 5.4
    CVE-2023-28171

    WordPress Brilliance Theme <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in WP Chill Brilliance theme <= 1.3.1 versions.

    WP Chill Brilliance
  • Medium 6.5
    CVE-2023-26013

    WordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPChill Strong Testimonials plugin <= 3.0.2 versions.

    WP Chill Strong Testimonials
  • Medium 6.5
    CVE-2020-36721

    Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation

    The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the 'activello_activate_plugin' and 'activello_deactivate_plugin' functions in the 'inc/welcome-screen/…

    WP Chill silkalns Activello Brilliance
  • Medium 5.9
    CVE-2023-25451

    WordPress CPO Content Types Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPChill CPO Content Types plugin <= 1.1.0 versions.

    WP Chill CPO Content Types
  • Medium 5.5
    CVE-2023-0162

    CPO Companion <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The CPO Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its content type settings parameters in versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible …

    WP Chill CPO Companion Web / CMS
  • Medium 6.5
    CVE-2022-41135

    WordPress Modula plugin <= 2.6.9 - Unauth. Plugin Settings Change vulnerability

    Unauth. Plugin Settings Change vulnerability in Modula plugin <= 2.6.9 on WordPress.

    WP Chill Modula Image Gallery (WordPress plugin) Web / CMS
  • Medium 4.8
    CVE-2022-40672

    WordPress CPO Shortcodes plugin <= 1.5.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CPO Shortcodes plugin <= 1.5.0 at WordPress.

    WP Chill CPO Shortcodes (WordPress plugin) Web / CMS
  • Medium 4.1
    CVE-2022-37407

    WordPress Gallery PhotoBlocks plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress.

    WP Chill Gallery PhotoBlocks (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-36292

    WordPress Gallery PhotoBlocks plugin <= 1.2.6 - Cross-Site Request Forgery (CSRF) vulnerabilities

    Cross-Site Request Forgery (CSRF) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress.

    WP Chill Gallery PhotoBlocks (WordPress plugin) Web / CMS
  • Medium 4.8
    CVE-2021-36920

    WordPress plugin Download Monitor <= 4.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

    Authenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered in WordPress plugin Download Monitor (versions <= 4.4.6).

    WP Chill Download Monitor (WordPress plugin) Web / CMS