AW
Vendor
Awplife
24
CVEs
0
On KEV
0
New 30D
Products
EM7.5
Event Monster
Awplife
6 CVEs0 on KEV0 new
AG8.8
Album Gallery
Awplife
2 CVEs0 on KEV0 new
BF5.4
Blog Filter
Awplife
2 CVEs0 on KEV0 new
CF9.8
Contact Form Widget
Awplife
2 CVEs0 on KEV0 new
FO6.1
Formula
Awplife
2 CVEs0 on KEV0 new
GG7.5
Grid Gallery
Awplife
2 CVEs0 on KEV0 new
SR8.8
Slider Responsive Slideshow
Awplife
2 CVEs0 on KEV0 new
WE5.4
Weather Effect
Awplife
2 CVEs0 on KEV0 new
CS5.3
Coming Soon Maintenance Mode
Awplife
1 CVEs0 on KEV0 new
IG8.8
Image Gallery
Awplife
1 CVEs0 on KEV0 new
MS8.8
Media Slider
Awplife
1 CVEs0 on KEV0 new
PB4.8
Profile Box Shortcode And Widget
Awplife
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-11396 | EM Event Monster Awplife | 5.3 | Jan 13 | Event monster <= 1.4.3 - Information Exposure Via Visitors List Export |
| CVE-2024-5059 | EM Event Monster Awplife | 7.5 | Jun 21 | WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability |
| CVE-2024-35717 | MS Media Slider Awplife | 8.8 | Jun 10 | WordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerability |
| CVE-2024-35720 | AG Album Gallery Awplife | 8.8 | Jun 10 | WordPress Album Gallery – WordPress Gallery plugin <= 1.5.7 - Broken Access Control vulnerability |
| CVE-2024-35721 | IG Image Gallery Awplife | 8.8 | Jun 10 | WordPress Image Gallery plugin <= 1.4.5 - Broken Access Control vulnerability |
| CVE-2024-35722 | SR Slider Responsive Slideshow Awplife | 8.8 | Jun 10 | WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability |
| CVE-2024-5613 | FO Formula Awplife | 6.1 | Jun 8 | Formula <= 0.5.1 - Reflected Cross-Site Scripting via quality_customizer_notify_dismiss_action |
| CVE-2024-5638 | FO Formula Awplife | 6.1 | Jun 8 | Formula <= 0.5.1 - Reflected Cross-Site Scripting via ti_customizer_notify_dismiss_recommended_plugins |
| CVE-2024-34754 | CF Contact Form Widget Awplife | 5.3 | Jun 3 | WordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerability |
| CVE-2024-1897 | GG Grid Gallery Awplife | 7.5 | May 2 | Grid Gallery – Photo Image Grid Gallery <= 1.4.3 - Authenticated (Contributor+) PHP Object Injection via shortcode |
| CVE-2024-1895 | EM Event Monster Awplife | 7.5 | Apr 30 | Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta |
| CVE-2024-1401 | PB Profile Box Shortcode And Widget Awplife | 4.8 | Mar 19 | Profile Box Shortcode And Widget < 1.2.1 Admin+ Stored XSS |
| CVE-2024-1859 | SR Slider Responsive Slideshow Awplife | 8.8 | Mar 1 | Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.3.8 - Authenticated (Contributor+) PHP Object Injection |
| CVE-2024-1475 | CS Coming Soon Maintenance Mode Awplife | 5.3 | Feb 20 | Coming Soon Maintenance Mode <= 1.0.5 - Information Exposure |
| CVE-2023-47525 | EM Event Monster Awplife | 5.4 | Dec 21 | WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-5291 | BF Blog Filter Awplife | 5.4 | Oct 4 | Blog Filter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2023-5295 | BF Blog Filter Awplife | 5.4 | Sep 30 | Comments by Startbit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2023-23646 | AG Album Gallery Awplife | 8.8 | Jul 17 | Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Album Gallery – WordPress Gallery plugin <= 1.4.9 versions |
| CVE-2022-3720 | EM Event Monster Awplife | 7.2 | Nov 21 | The Event Monster WordPress plugin before 1.2.0 does not validate and escape some parameters before using them in SQL statements, which could lead to SQL Injection exploitable by… |
| CVE-2022-3336 | EM Event Monster Awplife | 4.3 | Nov 21 | The Event Monster WordPress plugin before 1.2.0 does not have CSRF check when deleting visitors, which could allow attackers to make logged in admin delete arbitrary visitors via… |
| CVE-2021-24709 | WE Weather Effect Awplife | 4.8 | Oct 11 | The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size_leaf, *_flakes_leaf, *_speed) which could lead to Stored… |
| CVE-2021-24683 | WE Weather Effect Awplife | 5.4 | Oct 11 | The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do not validate or escape them, which could lead to Stored… |
| CVE-2021-24529 | GG Grid Gallery Awplife | 5.4 | Aug 23 | The Grid Gallery – Photo Image Grid Gallery WordPress plugin before 1.2.5 does not properly sanitize the title field for image galleries when adding them via the admin dashboard,… |
| CVE-2019-17072 | CF Contact Form Widget Awplife | 9.8 | Oct 10 | The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php |