Login Request a demo
WP
Vendor
wpchill
32 products with CVEs on record
103
CVEs
0
On KEV
3
New 30D
Products
DM
Download Monitor
wpchill
8.8
18 CVEs0 on KEV1 new
ST
Strong Testimonials
wpchill
8.8
12 CVEs0 on KEV1 new
MI
Modula Image Gallery – Photo Grid & Video Gallery
wpchill
8.8
9 CVEs0 on KEV1 new
KF
Kali Forms — Contact Form & Drag-and-Drop Builder
wpchill
9.8
10 CVEs0 on KEV0 new
IP
Image Photo Gallery Final Tiles Grid
wpchill
6.8
6 CVEs0 on KEV0 new
MI
Modula Image Gallery
Wpchill
8.8
5 CVEs0 on KEV0 new
PP
Passster – Password Protect Pages and Content
wpchill
7.5
4 CVEs0 on KEV0 new
BR
Brilliance
wpchill
9.8
3 CVEs0 on KEV0 new
CL
Check & Log Email
Wpchill
7.2
3 CVEs0 on KEV0 new
PA
Passster
Wpchill
7.5
3 CVEs0 on KEV0 new
RF
Remove Footer Credit
WPChill
5.4
3 CVEs0 on KEV0 new
CS
CPO Shortcodes
wpchill
5.4
2 CVEs0 on KEV0 new
GP
Gallery Photoblocks
Wpchill
8.8
2 CVEs0 on KEV0 new
GP
Gallery PhotoBlocks (WordPress plugin)
WPChill
8.8
2 CVEs0 on KEV0 new
IG
Image Gallery – Photo Grid & Video Gallery
wpchill
7.2
2 CVEs0 on KEV0 new
RA
RSVP and Event Management
wpchill
5.3
2 CVEs0 on KEV0 new
SR
Simple Restrict
wpchill
5.3
2 CVEs0 on KEV0 new
AF
Affluent
wpchill
9.8
1 CVEs0 on KEV0 new
AL
Allegiant
wpchill
9.8
1 CVEs0 on KEV0 new
CC
CPO Companion
wpchill
4.8
1 CVEs0 on KEV0 new
CC
CPO Content Types
WPChill
4.8
1 CVEs0 on KEV0 new
CS
CPO Shortcodes (WordPress plugin)
WPChill
4.8
1 CVEs0 on KEV0 new
CW
Customizable Wordpress Gallery Plugin - Modula Image Gallery
Wpchill
5.3
1 CVEs0 on KEV0 new
FS
Filr – Secure document library
wpchill
4.4
1 CVEs0 on KEV0 new
HF
Htaccess File Editor
Wpchill
8.8
1 CVEs0 on KEV0 new
IM
Imageseo
Wpchill
5.3
1 CVEs0 on KEV0 new
KS
KB Support
Wpchill
6.1
1 CVEs0 on KEV0 new
MA
Mashshare
Wpchill
5.4
1 CVEs0 on KEV0 new
MI
Modula Image Gallery (WordPress plugin)
WPChill
5.3
1 CVEs0 on KEV0 new
OI
Optimize Images Alt Text (alt Tag) & Names For Seo Using AI
Wpchill
5.3
1 CVEs0 on KEV0 new
QS
Qyrr – simply and modern QR-Code creation
wpchill
6.4
1 CVEs0 on KEV0 new
TR
Transcend
wpchill
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-107659
MI
Modula Image Gallery – Photo Grid & Video Gallery
wpchill
7.5
0%
Oct 16Modula Image Gallery <= 3.0.11 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Exposed 'modulaSettings' REST field on the modula-gallery CPT
CVE-2026-96650
ST
Strong Testimonials
wpchill
7.2
0%
Oct 3Strong Testimonials <= 3.3.11 - Unauthenticated Stored Cross-Site Scripting via 'platform_user_photo' Custom Field
CVE-2026-100182
DM
Download Monitor
wpchill
7.2
0%
Oct 2Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor
CVE-2026-89406
MI
Modula Image Gallery – Photo Grid & Video Gallery
wpchill
7.5
0%
Sep 25Modula Image Gallery <= 3.0.1 - Missing Authorization to Unauthenticated Private Gallery Image Disclosure via 'modula_gallery_id' and 'modula_image_id' Parameters
CVE-2026-92713
MI
Modula Image Gallery – Photo Grid & Video Gallery
wpchill
8.1
0%
Sep 25Modula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameter
CVE-2026-92622
ST
Strong Testimonials
wpchill
6.4
0%
Sep 18Strong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute
CVE-2026-4559
IP
Image Photo Gallery Final Tiles Grid
wpchill
6.4
0%
Aug 22Image Photo Gallery Final Tiles Grid <= 3.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'delay' Shortcode Attribute
CVE-2026-16144
KF
Kali Forms — Contact Form & Drag-and-Drop Builder
wpchill
8.1
1%
Aug 1Kali Forms <= 2.4.20 - Unauthenticated Remote Code Execution via 'thisPermalink' Field Parameter
CVE-2026-15395
KF
Kali Forms — Contact Form & Drag-and-Drop Builder
wpchill
7.2
0%
Jul 17Kali Forms <= 2.4.18 - Unauthenticated Stored Cross-Site Scripting via 'digitalSignature' Field Value
CVE-2026-9107
KF
Kali Forms — Contact Form & Drag-and-Drop Builder
wpchill
6.4
0%
Jul 1Kali Forms <= 2.4.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'kaliforms_field_components' Parameter
CVE-2026-3239
ST
Strong Testimonials
wpchill
6.4
0%
Apr 8Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode
CVE-2026-4401
DM
Download Monitor
wpchill
5.4
0%
Apr 7Download Monitor <= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and Disabling
CVE-2026-3124
DM
Download Monitor
wpchill
7.5
0%
Mar 30Download Monitor <= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'
CVE-2026-3584
KF
Kali Forms — Contact Form & Drag-and-Drop Builder
wpchill
9.8
7%
Mar 20Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process
CVE-2026-1860
KF
Kali Forms — Contact Form & Drag-and-Drop Builder
wpchill
4.3
0%
Feb 18Kali Forms <= 2.4.8 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Form Data Exposure
CVE-2026-1254
MI
Modula Image Gallery – Photo Grid & Video Gallery
wpchill
4.3
0%
Feb 14Modula Image Gallery – Photo Grid & Video Gallery <= 2.13.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post/Page Editing
CVE-2025-14865
PP
Passster – Password Protect Pages and Content
wpchill
6.4
0%
Jan 28Passster – Password Protect Pages and Content <= 4.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-15466
IP
Image Photo Gallery Final Tiles Grid
wpchill
5.4
0%
Jan 19Image Photo Gallery Final Tiles Grid <= 3.6.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Gallery Management
CVE-2025-14632
FS
Filr – Secure document library
wpchill
4.4
0%
Jan 17Filr – Secure document library <= 1.2.11 - Authenticated (Administrator+) Stored Cross-Site Scripting via HTML Upload
CVE-2025-14426
ST
Strong Testimonials
wpchill
4.3
0%
Dec 30Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update
CVE-2025-13693
IP
Image Photo Gallery Final Tiles Grid
wpchill
6.4
0%
Dec 21Image Photo Gallery Final Tiles Grid <= 3.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'Custom Scripts' Setting
CVE-2025-14455
IP
Image Photo Gallery Final Tiles Grid
wpchill
5.4
0%
Dec 19Image Photo Gallery Final Tiles Grid <= 3.6.7 - Missing Authorization to Authenticated (Contributor+) Gallery Management
CVE-2025-14003
MI
Modula Image Gallery – Photo Grid & Video Gallery
wpchill
4.3
0%
Dec 15Image Gallery – Photo Grid & Video Gallery <= 2.13.3 - Missing Authorization to Authenticated (Author+) Arbitrary Gallery Modification
CVE-2025-13891
MI
Modula Image Gallery – Photo Grid & Video Gallery
wpchill
6.5
0%
Dec 12Image Gallery – Photo Grid & Video Gallery (Modula) <= 2.13.3 - Missing Authorization to Arbitrary Directory Listing
CVE-2025-13646
IG
Image Gallery – Photo Grid & Video Gallery
wpchill
6.6
1%
Dec 3Modula 2.13.1 - 2.13.2 - Authenticated (Author+) Arbitrary File Upload via Race Condition
CVE-2025-13645
IG
Image Gallery – Photo Grid & Video Gallery
wpchill
7.2
1%
Dec 3Modula 2.13.1 - 2.13.2 - Authenticated (Author+) Arbitrary File Deletion
CVE-2025-12494
MI
Modula Image Gallery – Photo Grid & Video Gallery
wpchill
4.3
0%
Nov 15Image Gallery – Photo Grid & Video Gallery <= 2.12.28 - Improper Authorization to Authenticated (Author+) Arbitrary Image File Move
CVE-2025-11268
ST
Strong Testimonials
wpchill
4.3
0%
Nov 6Strong Testimonials <= 3.2.16 - Unauthenticated Arbitrary Shortcode Execution
CVE-2025-10000
QS
Qyrr – simply and modern QR-Code creation
wpchill
6.4
0%
Sep 30Qyrr – simply and modern QR-Code creation <= 2.0.7 - Authenticated (Contributor+) Arbitrary File Upload
CVE-2025-7367
ST
Strong Testimonials
wpchill
6.4
0%
Jul 15Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields
CVE-2024-9416
MI
Modula Image Gallery – Photo Grid & Video Gallery
wpchill
5.4
0%
Apr 3Modula Image Gallery <= 2.10.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox 5 JavaScript Library
CVE-2024-6261
IP
Image Photo Gallery Final Tiles Grid
wpchill
5.4
0%
Feb 27Image Photo Gallery Final Tiles Grid <= 3.6.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
CVE-2024-12853
MI
Modula Image Gallery – Photo Grid & Video Gallery
wpchill
8.8
1%
Jan 8Modula Image Gallery <= 2.11.10 - Authenticated (Author+) Arbitrary File Upload
CVE-2024-12711
RA
RSVP and Event Management
wpchill
5.3
0%
Jan 7RSVP and Event Management <= 2.7.13 - Missing Authorization
CVE-2024-11282
PP
Passster – Password Protect Pages and Content
wpchill
7.5
0%
Jan 7Passster – Password Protect Pages and Content <= 4.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-11106
SR
Simple Restrict
wpchill
5.3
0%
Dec 10Simple Restrict <= 1.2.7 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-49256
HF
Htaccess File Editor
Wpchill
8.8
0%
Nov 1WordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerability
CVE-2024-47362
ST
Strong Testimonials
Wpchill
8.8
0%
Nov 1WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerability
CVE-2024-10399
DM
Download Monitor
wpchill
4.3
0%
Oct 30Download Monitor <= 5.0.13 - Missing Authorization to Sensitive Information Exposure
CVE-2024-10092
DM
Download Monitor
wpchill
4.3
0%
Oct 26Download Monitor <= 5.0.12 - Missing Authorization to API Key Manipulation
CVE-2022-4972
DM
Download Monitor
wpchill
7.5
0%
Oct 16Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export
CVE-2024-8552
DM
Download Monitor
wpchill
4.3
0%
Sep 26Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable
CVE-2024-6571
OI
Optimize Images Alt Text (alt Tag) & Names For Seo Using AI
Wpchill
5.3
0%
Jul 24Optimize Images ALT Text (alt tag) & names for SEO using AI <= 3.1.1 - Unauthenticated Full Path Disclosure
CVE-2024-3710
IP
Image Photo Gallery Final Tiles Grid
Wpchill
6.8
0%
Jul 13Image Photo Gallery Final Tiles Grid < 3.6.0 - Contributor+ Stored XSS
CVE-2023-6491
ST
Strong Testimonials
wpchill
4.3
0%
Jun 7Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification
CVE-2024-3269
DM
Download Monitor
wpchill
5.4
0%
May 30Download Monitor <= 4.9.13 - Missing Authorization
CVE-2024-3261
ST
Strong Testimonials
Wpchill
4.8
0%
Apr 24Strong Testimonials < 3.1.12 - Contributor+ Stored XSS
CVE-2024-32429
RF
Remove Footer Credit
WPChill
4.8
0%
Apr 15WordPress Remove Footer Credit plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability
CVE-2024-2026
PP
Passster – Password Protect Pages and Content
wpchill
5.4
1%
Apr 9Passster <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_protector Shortcode
CVE-2024-30501
DM
Download Monitor
WPChill
7.2
1%
Mar 29WordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerability
CVE-2024-1083
SR
Simple Restrict
wpchill
5.3
1%
Mar 13Simple Restrict <= 1.2.6 - Missing Authorization to Sensitive Information Exposure
CVE-2024-1218
KF
Kali Forms — Contact Form & Drag-and-Drop Builder
wpchill
5.4
0%
Feb 20Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization
CVE-2024-1217
KF
Kali Forms — Contact Form & Drag-and-Drop Builder
wpchill
4.3
0%
Feb 20Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization to Arbitrary Plugin Deactivation
CVE-2024-0616
PP
Passster – Password Protect Pages and Content
wpchill
5.3
0%
Feb 20Passster – Password Protect Pages and Content <= 4.2.6.2 - Missing Authorization to Sensitive Information Exposure
CVE-2022-45354
DM
Download Monitor
WPChill
7.5
38%
Jan 8WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure
CVE-2023-52123
ST
Strong Testimonials
WPChill
8.8
0%
Jan 5WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-34007
DM
Download Monitor
WPChill
8.8
1%
Dec 20WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload
CVE-2023-5704
CS
CPO Shortcodes
wpchill
5.4
0%
Nov 22CPO Shortcodes <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-31219
DM
Download Monitor
WPChill
4.9
1%
Nov 13WordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)
CVE-2023-28171
BR
Brilliance
Wpchill
5.4
0%
Jun 22WordPress Brilliance Theme <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)