WC
Vendor
WP Chill
11 products with CVEs on record
40
CVEs
0
On KEV
13
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116408
New
GP
Gallery PhotoBlocks
WP Chill
6.5
0%
Oct 26WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-114710
New
GP
Gallery PhotoBlocks
WP Chill
6.5
0%
Oct 26WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-112843
New
ST
Strong Testimonials
WP Chill
4.3
0%
Oct 22WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability
CVE-2026-107435
ST
Strong Testimonials
WP Chill
7.1
0%
Oct 21WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability
CVE-2026-107436
ST
Strong Testimonials
WP Chill
8.8
0%
Oct 18WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability
CVE-2026-110896
PA
Passster
WP Chill
5.3
0%
Oct 16WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability
CVE-2026-110375
DM
Download Monitor
WP Chill
6.5
0%
Oct 15WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-109897
ST
Strong Testimonials
WP Chill
5.4
0%
Oct 15WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability
CVE-2026-110371
ST
Strong Testimonials
WP Chill
4.3
0%
Oct 15WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability
CVE-2026-109896
DM
Download Monitor integration for WooCommerce
WP Chill
4.3
0%
Oct 13WordPress Download Monitor integration for WooCommerce plugin <= 1.0.3 - Broken Access Control vulnerability
CVE-2026-105876
MI
Modula Image Gallery
WP Chill
5.3
0%
Oct 7WordPress Modula Image Gallery plugin <= 3.0.11 - Sensitive Data Exposure vulnerability
CVE-2026-104409
IP
Image Photo Gallery Final Tiles Grid
WP Chill
6.5
0%
Oct 5WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97286
ST
Strong Testimonials
WP Chill
6.5
0%
Sep 30WordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62114
PA
Passster
WP Chill
5.3
0%
Sep 11WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability
CVE-2026-84781
GP
Gallery PhotoBlocks
WP Chill
6.5
0%
Sep 2WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-81276
KF
Kali Forms
WP Chill
5.3
0%
Aug 27WordPress Kali Forms plugin <= 2.4.23 - Broken Access Control vulnerability
CVE-2026-65446
KF
Kali Forms
WP Chill
7.1
0%
Jul 27WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66448
GP
Gallery PhotoBlocks
WP Chill
6.5
0%
Jul 27WordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65475
MI
Modula Image Gallery
WP Chill
6.5
0%
Jul 23WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59542
KF
Kali Forms
WP Chill
7.7
0%
Jul 23WordPress Kali Forms plugin <= 2.4.18 - Arbitrary File Deletion vulnerability
CVE-2026-42688
MI
Modula Image Gallery
WP Chill
6.5
0%
Jun 15WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39489
DM
Download Monitor
WP Chill
4.4
0%
Jun 15WordPress Download Monitor plugin <= 5.1.9 - Non-Arbitrary File Download vulnerability
CVE-2026-39481
MI
Modula Image Gallery
WP Chill
7.2
0%
Jun 15WordPress Modula Image Gallery plugin <= 2.14.18 - PHP Object Injection vulnerability
CVE-2026-27398
RA
RSVP and Event Management
WP Chill
5.3
0%
May 25WordPress RSVP and Event Management plugin <= 2.7.16 - Broken Access Control vulnerability
CVE-2026-27424
IP
Image Photo Gallery Final Tiles Grid
WP Chill
4.3
0%
May 20WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability
CVE-2026-39561
RE
Revive.so
WP Chill
5.3
0%
Apr 8WordPress Revive.so plugin <= 2.0.7 - Broken Access Control vulnerability
CVE-2026-39536
RA
RSVP and Event Management
WP Chill
5.3
0%
Apr 8WordPress RSVP and Event Management plugin <= 2.7.16 - Sensitive Data Exposure vulnerability
CVE-2026-39510
IP
Image Photo Gallery Final Tiles Grid
WP Chill
2.7
0%
Apr 8WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-39486
DM
Download Monitor
WP Chill
8.5
0%
Apr 8WordPress Download Monitor plugin <= 5.1.8 - SQL Injection vulnerability
CVE-2026-28133
FI
Filr
WP Chill
8.5
0%
Mar 5WordPress Filr plugin <= 1.2.14 - Arbitrary File Upload vulnerability
CVE-2026-25375
IP
Image Photo Gallery Final Tiles Grid
WP Chill
4.3
0%
Feb 19WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerability
CVE-2026-25036
PA
Passster
WP Chill
6.5
0%
Feb 3WordPress Passster plugin <= 4.2.25 - Broken Access Control vulnerability
CVE-2026-24957
ST
Strong Testimonials
WP Chill
6.5
0%
Feb 3WordPress Strong Testimonials plugin <= 3.2.20 - Broken Access Control vulnerability
CVE-2026-24939
MI
Modula Image Gallery
WP Chill
4.3
0%
Feb 3WordPress Modula Image Gallery plugin <= 2.13.6 - Broken Access Control vulnerability
CVE-2026-24389
GP
Gallery PhotoBlocks
WP Chill
6.5
0%
Jan 22WordPress Gallery PhotoBlocks plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-23976
MI
Modula Image Gallery
WP Chill
5.9
0%
Jan 22WordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64230
FI
Filr
WP Chill
7.7
0%
Dec 18WordPress Filr plugin <= 1.2.10 - Arbitrary File Deletion vulnerability
CVE-2025-64218
PA
Passster
WP Chill
7.5
0%
Dec 18WordPress Passster plugin <= 4.2.19 - Sensitive Data Exposure vulnerability
CVE-2023-46083
KF
Kali Forms
WP Chill
5.3
0%
Jan 2WordPress Kali Forms plugin <= 2.3.27 - Broken Access Control vulnerability
CVE-2023-45275
KF
Kali Forms
WP Chill
6.5
0%
Jan 2WordPress Contact Form builder with drag & drop plugin <= 2.3.28 - Broken Access Control vulnerability