AW
Vendor
Awplife
24
CVEs
0
On KEV
0
New 30D
Products
EM7.5
Event Monster
Awplife
6 CVEs0 on KEV0 new
AG8.8
Album Gallery
Awplife
2 CVEs0 on KEV0 new
BF5.4
Blog Filter
Awplife
2 CVEs0 on KEV0 new
CF9.8
Contact Form Widget
Awplife
2 CVEs0 on KEV0 new
FO6.1
Formula
Awplife
2 CVEs0 on KEV0 new
GG7.5
Grid Gallery
Awplife
2 CVEs0 on KEV0 new
SR8.8
Slider Responsive Slideshow
Awplife
2 CVEs0 on KEV0 new
WE5.4
Weather Effect
Awplife
2 CVEs0 on KEV0 new
CS5.3
Coming Soon Maintenance Mode
Awplife
1 CVEs0 on KEV0 new
IG8.8
Image Gallery
Awplife
1 CVEs0 on KEV0 new
MS8.8
Media Slider
Awplife
1 CVEs0 on KEV0 new
PB4.8
Profile Box Shortcode And Widget
Awplife
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-11396 | EM Event Monster Awplife | 5.3 | Jan 13 | Event monster <= 1.4.3 - Information Exposure Via Visitors List Export |
| CVE-2024-5059 | EM Event Monster Awplife | 7.5 | Jun 21 | WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability |
| CVE-2024-35717 | MS Media Slider Awplife | 8.8 | Jun 10 | WordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerability |
| CVE-2024-35720 | AG Album Gallery Awplife | 8.8 | Jun 10 | WordPress Album Gallery – WordPress Gallery plugin <= 1.5.7 - Broken Access Control vulnerability |
| CVE-2024-35721 | IG Image Gallery Awplife | 8.8 | Jun 10 | WordPress Image Gallery plugin <= 1.4.5 - Broken Access Control vulnerability |
| CVE-2024-35722 | SR Slider Responsive Slideshow Awplife | 8.8 | Jun 10 | WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability |
| CVE-2024-5613 | FO Formula Awplife | 6.1 | Jun 8 | Formula <= 0.5.1 - Reflected Cross-Site Scripting via quality_customizer_notify_dismiss_action |
| CVE-2024-5638 | FO Formula Awplife | 6.1 | Jun 8 | Formula <= 0.5.1 - Reflected Cross-Site Scripting via ti_customizer_notify_dismiss_recommended_plugins |
| CVE-2024-34754 | CF Contact Form Widget Awplife | 5.3 | Jun 3 | WordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerability |
| CVE-2024-1897 | GG Grid Gallery Awplife | 7.5 | May 2 | Grid Gallery – Photo Image Grid Gallery <= 1.4.3 - Authenticated (Contributor+) PHP Object Injection via shortcode |
| CVE-2024-1895 | EM Event Monster Awplife | 7.5 | Apr 30 | Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta |
| CVE-2024-1401 | PB Profile Box Shortcode And Widget Awplife | 4.8 | Mar 19 | Profile Box Shortcode And Widget < 1.2.1 Admin+ Stored XSS |
| CVE-2024-1859 | SR Slider Responsive Slideshow Awplife | 8.8 | Mar 1 | Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.3.8 - Authenticated (Contributor+) PHP Object Injection |
| CVE-2024-1475 | CS Coming Soon Maintenance Mode Awplife | 5.3 | Feb 20 | Coming Soon Maintenance Mode <= 1.0.5 - Information Exposure |
| CVE-2023-47525 | EM Event Monster Awplife | 5.4 | Dec 21 | WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-5291 | BF Blog Filter Awplife | 5.4 | Oct 4 | Blog Filter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2023-5295 | BF Blog Filter Awplife | 5.4 | Sep 30 | Comments by Startbit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2023-23646 | AG Album Gallery Awplife | 8.8 | Jul 17 | WordPress Album Gallery – WordPress Gallery Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2022-3720 | EM Event Monster Awplife | 7.2 | Nov 21 | Event Monster < 1.2.1 - Admin+ SQLi |
| CVE-2022-3336 | EM Event Monster Awplife | 4.3 | Nov 21 | Event Monster < 1.2.0 - Visitors Deletion via CSRF |
| CVE-2021-24709 | WE Weather Effect Awplife | 4.8 | Oct 11 | Weather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting |
| CVE-2021-24683 | WE Weather Effect Awplife | 5.4 | Oct 11 | Weather Effect < 1.3.4 - CSRF to Stored Cross-Site Scripting |
| CVE-2021-24529 | GG Grid Gallery Awplife | 5.4 | Aug 23 | Grid Gallery < 1.2.5 - Authenticated Stored Cross Site Scripting (XSS) |
| CVE-2019-17072 | CF Contact Form Widget Awplife | 9.8 | Oct 10 | The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php |