Log in Start free

gdragon

Products

ProductCVEsExploitedLatest
coreActivity: Activity Logging for WordPress2–May 13, 2026
GD Rating System2–Oct 3, 2026
GD bbPress Attachments1–Nov 20, 2024
GD Mail Queue1–Jul 12, 2023

Exploited and recent CVEs

  • CVE-2026-93430 High 7.2 GD Rating System <= 3.7.1 - Unauthenticated Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX 0.3%
  • CVE-2026-7635 High 8.1 coreActivity: Activity Logging for WordPress <= 3.0 - Unauthenticated PHP Object Injection via 'user_agent' Log Meta Field 0.5%
  • CVE-2025-3436 Medium 6.5 coreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL Injection 0.4%
  • CVE-2024-11278 Medium 6.1 GD bbPress Attachments <= 4.7.2 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-11198 Medium 6.4 GD Rating System <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class Parameter 0.4%
  • CVE-2023-3122 High 7.2 GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Email 0.5%