Skip to content
OpenAdvisories

Vendor

wpdiscover

8 known vulnerabilities.

Products

Timeline Event History 4 Social Feed Gallery Portfolio 1 Photo Gallery Builder 1 Accordion Slider Gallery 1 Blog Manager WP 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-1127

    Timeline Event History <= 3.2 - Reflected Cross-Site Scripting

    The Timeline Event History plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `id` parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthentic…

    wpdiscover Timeline Event History Web / CMS
  • Medium 4.3
    CVE-2025-62130

    WordPress Accordion Slider Gallery plugin <= 2.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wpdiscover Accordion Slider Gallery accordion-slider-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion Slider Gallery: from n/a through <= 2.7.

    wpdiscover Accordion Slider Gallery
  • Medium 6.4
    CVE-2025-13896

    Social Feed Gallery Portfolio <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute

    The Social Feed Gallery Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the [igp-wp] shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This mak…

    wpdiscover Social Feed Gallery Portfolio Web / CMS
  • Medium 5.9
    CVE-2025-46517

    WordPress Blog Manager WP plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdiscover Blog Manager WP blog-manager-wp allows Stored XSS.This issue affects Blog Manager WP: from n/a through <= 1.0.5.

    wpdiscover Blog Manager WP
  • Medium 6.5
    CVE-2025-31595

    WordPress Timeline Event History plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdiscover Timeline Event History timeline-event-history allows Stored XSS.This issue affects Timeline Event History: from n/a through <= 3.2.

    wpdiscover Timeline Event History
  • Medium 4.3
    CVE-2024-49325

    WordPress Photo Gallery Builder plugin <= 3.0 - Broken Access Control to Notice Dismissal vulnerability

    Missing Authorization vulnerability in wpdiscover Photo Gallery Builder photo-gallery-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Photo Gallery Builder: from n/a through <= 3.0.

    wpdiscover Photo Gallery Builder