Milan Petrovic

Products

Product	CVEs	Exploited	Latest
GD Rating System	3	–	Jul 13, 2026
GD Security Headers	3	–	Jul 13, 2026
GD bbPress Attachments	1	–	Dec 6, 2022
GD bbPress Tools	1	–	Sep 22, 2025
GD Mail Queue	1	–	Jan 31, 2025

CVE-2026-57771 High 8.5 WordPress GD Rating System plugin <= 3.7 - SQL Injection vulnerability 0.4%
CVE-2026-57403 High 7.1 WordPress GD Security Headers plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2025-58002 Medium 6.5 WordPress GD bbPress Tools Plugin <= 3.5.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
CVE-2025-24608 High 7.1 WordPress GD Mail Queue Plugin <= 4.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2024-38709 Medium 5.3 WordPress GD Rating System plugin <= 3.6 - Local File Inclusion vulnerability 0.5%
CVE-2024-25093 High 7.1 WordPress GD Rating System Plugin <= 3.5 is vulnerable to Cross Site Scripting (XSS) 0.4%
CVE-2023-46821 High 7.6 WordPress GD Security Headers Plugin <= 1.7 is vulnerable to SQL Injection 0.6%
CVE-2023-40330 High 7.1 WordPress GD Security Headers Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
CVE-2022-45816 Medium 4.8 WordPress GD bbPress Attachments Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS) 0.4%