GS Plugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| GS Testimonial Slider | 4 | – | Oct 30, 2026 |
| GS Pins for Pinterest | 3 | – | Oct 21, 2026 |
| GS Testimonial Slider (WordPress plugin) | 2 | – | Sep 23, 2022 |
| GS Shots for Dribbble | 1 | – | Jan 2, 2025 |
| GS Variation Swatches for WooCommerce | 1 | – | May 7, 2025 |
| Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation | 1 | – | Feb 29, 2024 |
| Project Showcase | 1 | – | Jan 2, 2025 |
| GS Coaches | 1 | – | Jan 2, 2025 |
| WordPress Team Members – GS Plugins | 1 | – | Oct 21, 2026 |
| GS Logo Slider | 1 | – | Oct 28, 2026 |
| GS Portfolio for Envato | 1 | – | Dec 31, 2025 |
Exploited and recent CVEs
- CVE-2026-78527 WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability 0.4%
- CVE-2026-116391 WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability 0.4%
- CVE-2026-110369 WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability 0.4%
- CVE-2026-110370 WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerability 0.4%
- CVE-2025-62755 WordPress GS Portfolio for Envato plugin <= 1.4.2 - Broken Access Control vulnerability 0.2%
- CVE-2025-47526 WordPress GS Variation Swatches for WooCommerce plugin <= 3.0.4 - Broken Access Control Vulnerability 0.3%
- CVE-2025-47481 WordPress GS Testimonial Slider plugin <= 3.2.9 - Content Injection vulnerability 0.4%
- CVE-2025-47467 WordPress GS Testimonial Slider plugin <= 3.3.0 - Broken Access Control Vulnerability 0.3%
- CVE-2024-56263 WordPress GS Shots for Dribbble plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-56262 WordPress GS Coaches plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-56261 WordPress Project Showcase plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2023-32593 WordPress GS Pins for Pinterest plugin <= 1.6.7 - Broken Access Control vulnerability 0.4%
- CVE-2024-30443 WordPress GS Testimonial Slider plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-30192 WordPress Pinterest Plugin <= 1.8.2 - Cross Site Scripting (XSS) 0.3%
- CVE-2023-51530 WordPress GS Logo Slider Plugin <= 3.5.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
- CVE-2022-40213 WordPress GS Testimonial Slider plugin <= 1.9.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities 0.5%
- CVE-2022-35882 WordPress GS Testimonial Slider plugin <= 1.9.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%