wpdiscover

Products

Product	CVEs	Exploited	Latest
Timeline Event History	4	–	Feb 20, 2026
Accordion Slider Gallery	1	–	Dec 31, 2025
Blog Manager WP	1	–	Apr 24, 2025
Photo Gallery Builder	1	–	Oct 20, 2024
Social Feed Gallery Portfolio	1	–	Dec 6, 2025

CVE-2025-69384 High 7.1 WordPress Timeline Event History plugin <= 3.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2026-1127 Medium 6.1 Timeline Event History <= 3.2 - Reflected Cross-Site Scripting 0.2%
CVE-2025-62130 Medium 4.3 WordPress Accordion Slider Gallery plugin <= 2.7 - Broken Access Control vulnerability 0.2%
CVE-2025-13896 Medium 6.4 Social Feed Gallery Portfolio <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute 0.2%
CVE-2025-46517 Medium 5.9 WordPress Blog Manager WP plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability 0.2%
CVE-2025-31595 Medium 6.5 WordPress Timeline Event History plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2024-49325 Medium 4.3 WordPress Photo Gallery Builder plugin <= 3.0 - Broken Access Control to Notice Dismissal vulnerability 0.4%
CVE-2024-5726 High 8.8 Timeline Event History <= 3.1 - Authenticated (Contributor+) PHP Object Injection 0.7%