Skip to content
OpenAdvisories

Vendor

WP Chill

128 known vulnerabilities.

Products

Strong Testimonials 21 Download Monitor 17 Kali Forms — Contact Form & Drag-and-Drop Builder 10 Modula Image Gallery – Photo Grid & Video Gallery 10 Image Photo Gallery Final Tiles Grid 9 Passster 7 Modula Image Gallery 6 Gallery PhotoBlocks 6 RSVP and Event Management 5 Kali Forms 5 Passster – Password Protect Pages and Content 4 Brilliance 3 Revive.so 3 Filr 3 Allegiant 2 Image Gallery – Photo Grid & Video Gallery 2 Simple Restrict 2 Htaccess File Editor 2 Gallery PhotoBlocks (WordPress plugin) 2 Remove Footer Credit 1 Affluent 1 Transcend 1 Qyrr – simply and modern QR-Code creation 1 Filr – Secure document library 1 Download Monitor (WordPress plugin) 1 CPO Shortcodes (WordPress plugin) 1 CPO Shortcodes 1 Modula Image Gallery (WordPress plugin) 1 CPO Companion 1 Download Monitor integration for WooCommerce 1 CPO Content Types 1
All Critical High Medium Low Exploited only Public exploit

128 results · Feed

  • Medium 5.9
    CVE-2023-25451

    WordPress CPO Content Types Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPChill CPO Content Types plugin <= 1.1.0 versions.

    WP Chill CPO Content Types
  • Medium 5.5
    CVE-2023-0162

    CPO Companion <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The CPO Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its content type settings parameters in versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible …

    WP Chill CPO Companion Web / CMS
  • Medium 6.5
    CVE-2022-41135

    WordPress Modula plugin <= 2.6.9 - Unauth. Plugin Settings Change vulnerability

    Unauth. Plugin Settings Change vulnerability in Modula plugin <= 2.6.9 on WordPress.

    WP Chill Modula Image Gallery (WordPress plugin) Web / CMS
  • Medium 4.8
    CVE-2022-40672

    WordPress CPO Shortcodes plugin <= 1.5.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CPO Shortcodes plugin <= 1.5.0 at WordPress.

    WP Chill CPO Shortcodes (WordPress plugin) Web / CMS
  • Medium 4.1
    CVE-2022-37407

    WordPress Gallery PhotoBlocks plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress.

    WP Chill Gallery PhotoBlocks (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-36292

    WordPress Gallery PhotoBlocks plugin <= 1.2.6 - Cross-Site Request Forgery (CSRF) vulnerabilities

    Cross-Site Request Forgery (CSRF) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress.

    WP Chill Gallery PhotoBlocks (WordPress plugin) Web / CMS
  • Low 3.4
    CVE-2021-23174 EPSS 84%

    WordPress Download Monitor plugin <= 4.4.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerability discovered in Download Monitor WordPress plugin (versions <= 4.4.6) Vulnerable parameters: &post_title, &downloadable_file_version[0].

    WP Chill Download Monitor Web / CMS
  • Medium 4.8
    CVE-2021-36920

    WordPress plugin Download Monitor <= 4.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

    Authenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered in WordPress plugin Download Monitor (versions <= 4.4.6).

    WP Chill Download Monitor (WordPress plugin) Web / CMS