WesternDeal
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WPForms Google Sheet Connector | 2 | – | Feb 20, 2026 |
| GSheetConnector for Gravity Forms – Send Gravity Forms Entries to Google Sheets in Real-Time | 2 | – | Oct 11, 2025 |
| GSheetConnector – CF7 Google Sheets Connector | 1 | – | Aug 1, 2026 |
| GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time | 1 | – | Jun 8, 2024 |
| GSheetConnector for Forminator Forms | 1 | – | Jan 15, 2025 |
| Advanced Dewplayer | 1 | – | Mar 24, 2025 |
| GSheetConnector For Ninja Forms | 1 | – | Nov 22, 2025 |
| GSheetConnector for WooCommerce – Send your Orders and Products to Google Sheet in Real-Time | 1 | – | Feb 21, 2024 |
| WooCommerce Google Sheet Connector | 1 | – | Jul 16, 2025 |
| CF7 Google Sheets Connector | 1 | – | Feb 3, 2025 |
Exploited and recent CVEs
- CVE-2026-16614 GSheetConnector <= 5.2.1 - Authenticated (Administrator+) SQL Injection via 's' Parameter 0.4%
- CVE-2025-67979 WordPress WPForms Google Sheet Connector plugin <= 4.0.1 - Remote Code Execution (RCE) vulnerability 0.4%
- CVE-2025-67570 WordPress WPForms Google Sheet Connector plugin <= 4.0.0 - Broken Access Control vulnerability 0.3%
- CVE-2025-13136 GSheetConnector For Ninja Forms <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) System Information Exposure 0.2%
- CVE-2025-8606 GSheetConnector For Gravity Forms <= 1.3.23 - Cross-Site Request Forgery to Arbitrary Plugin Activation/Deactivation 0.2%
- CVE-2025-8593 GSheetConnector For Gravity Forms <= 1.3.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation 0.4%
- CVE-2025-54030 WordPress WooCommerce Google Sheet Connector plugin <= 1.3.20 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
- CVE-2025-30592 WordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control Vulnerability 0.4%
- CVE-2025-22686 WordPress CF7 Google Sheets Connector plugin <= 5.0.17 - Broken Access Control vulnerability 0.4%
- CVE-2025-22752 WordPress GSheetConnector for Forminator Forms Plugin <= 1.0.12 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-5654 CF7 Google Sheets Connector <= 5.0.9 - Missing Authorization to Limited Site Configuration Update 0.4%
- CVE-2024-1562 WooCommerce Google Sheet Connector <= 1.3.11 - Missing Authorization 0.4%