Log in Start free

A WP Life

Products

ProductCVEsExploitedLatest
Contact Form Widget4–Dec 31, 2025
Blog Filter2–Apr 8, 2026
Slider Responsive Slideshow – Image slider, Gallery slideshow2–Feb 20, 2026
Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery2–Feb 20, 2026
Album Gallery – WordPress Gallery2–Jun 10, 2024
Modal Popup Box1–Feb 20, 2026
Responsive Slider Gallery1–Sep 30, 2026
Right Click Disable OR Ban1–Apr 16, 2025
Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery1–May 6, 2024
Webenvo1–Jun 17, 2026
Event Management Tickets Booking1–Jun 21, 2024
Event Monster – Event Management, Tickets Booking, Upcoming Event1–Dec 21, 2023
Login Page Customizer – Customizer Login Page, Admin Page, Custom Design1–Dec 18, 2025
Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow1–Jun 10, 2024

Exploited and recent CVEs

  • CVE-2026-94122 High 7.2 WordPress Responsive Slider Gallery plugin <= 1.5.5 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-39589 Critical 9.9 WordPress Webenvo theme <= 0.0.6 - Arbitrary File Upload vulnerability 0.4%
  • CVE-2026-39517 Medium 6.5 WordPress Blog Filter plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-22346 High 8.8 WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.5.4 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-22345 High 8.8 WordPress Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery plugin <= 1.6.0 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-68526 High 8.8 WordPress Modal Popup Box plugin <= 1.6.1 - PHP Object Injection vulnerability 0.6%
  • CVE-2025-62134 Medium 5.4 WordPress Contact Form Widget plugin <= 1.5.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-69033 Medium 6.5 WordPress Blog Filter plugin <= 1.7.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-49902 Medium 6.5 WordPress Login Page Customizer – Customizer Login Page, Admin Page, Custom Design plugin <= 2.1.1 - Broken Access Control vulnerability 0.3%
  • CVE-2025-47491 High 7.4 WordPress Contact Form Widget plugin <= 1.4.6 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-39548 High 7.1 WordPress Right Click Disable OR Ban plugin <= 1.1.17 - CSRF to Stored XSS vulnerability 0.2%
  • CVE-2024-48037 Medium 5.4 WordPress Contact Form Widget plugin <= 1.4.2 - CSRF vulnerability 0.2%
  • CVE-2024-5059 Medium 5.3 WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2024-35717 Medium 4.3 WordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerability 0.4%
  • CVE-2024-35720 Medium 4.3 WordPress Album Gallery – WordPress Gallery plugin <= 1.5.7 - Broken Access Control vulnerability 0.4%
  • CVE-2024-35721 Medium 4.3 WordPress Image Gallery plugin <= 1.4.5 - Broken Access Control vulnerability 0.4%
  • CVE-2024-35722 Medium 4.3 WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability 0.4%
  • CVE-2024-34754 Medium 5.3 WordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2024-34377 Medium 4.3 WordPress Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugin <= 1.5.3 - Broken Access Control vulnerability 0.4%
  • CVE-2023-47525 Medium 5.9 WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-23646 Medium 4.3 WordPress Album Gallery – WordPress Gallery Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%