Log in Start free

WP Chill

Products

ProductCVEsExploitedLatest
Strong Testimonials10–Oct 29, 2026
Gallery PhotoBlocks6–Oct 26, 2026
Modula Image Gallery6–Oct 7, 2026
Kali Forms5–Aug 27, 2026
Passster5–Oct 16, 2026
Image Photo Gallery Final Tiles Grid4–Oct 5, 2026
Download Monitor4–Oct 15, 2026
Revive.so3–Apr 8, 2026
RSVP and Event Management3–May 25, 2026
Filr3–Mar 5, 2026
Htaccess File Editor2–Jan 15, 2025
Download Monitor integration for WooCommerce1–Oct 13, 2026
Allegiant1–Aug 18, 2024
Brilliance1–Jun 22, 2023

Exploited and recent CVEs

  • CVE-2026-114706 Medium 6.5 WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-116408 Medium 6.5 WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-114710 Medium 6.5 WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-112843 Medium 4.3 WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability 0.2%
  • CVE-2026-107435 High 7.1 WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-107436 High 8.8 WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-110896 Medium 5.3 WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability 0.2%
  • CVE-2026-110375 Medium 6.5 WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-109897 Medium 5.4 WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability 0.2%
  • CVE-2026-110371 Medium 4.3 WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability 0.2%
  • CVE-2026-109896 Medium 4.3 WordPress Download Monitor integration for WooCommerce plugin <= 1.0.3 - Broken Access Control vulnerability 0.2%
  • CVE-2026-105876 Medium 5.3 WordPress Modula Image Gallery plugin <= 3.0.11 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-104409 Medium 6.5 WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-97286 Medium 6.5 WordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-62114 Medium 5.3 WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability 0.3%
  • CVE-2026-84781 Medium 6.5 WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-81276 Medium 5.3 WordPress Kali Forms plugin <= 2.4.23 - Broken Access Control vulnerability 0.3%
  • CVE-2026-65446 High 7.1 WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-66448 Medium 6.5 WordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-65475 Medium 6.5 WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-59542 High 7.7 WordPress Kali Forms plugin <= 2.4.18 - Arbitrary File Deletion vulnerability 0.5%
  • CVE-2026-42688 Medium 6.5 WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-39489 Medium 4.4 WordPress Download Monitor plugin <= 5.1.9 - Non-Arbitrary File Download vulnerability 0.3%
  • CVE-2026-39481 High 7.2 WordPress Modula Image Gallery plugin <= 2.14.18 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-27398 Medium 5.3 WordPress RSVP and Event Management plugin <= 2.7.16 - Broken Access Control vulnerability 0.2%
  • CVE-2026-27424 Medium 4.3 WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability 0.2%
  • CVE-2026-39561 Medium 5.3 WordPress Revive.so plugin <= 2.0.7 - Broken Access Control vulnerability 0.2%
  • CVE-2026-39536 Medium 5.3 WordPress RSVP and Event Management plugin <= 2.7.16 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-39510 Low 2.7 WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-39486 High 8.5 WordPress Download Monitor plugin <= 5.1.8 - SQL Injection vulnerability 0.3%