Gopiplus vulnerabilities
52 vulnerabilities
Known vulnerabilities in Gopiplus products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 41 products.
Products
41- Email Posts To Subscribers3 vulnerabilities
- Image Horizontal Reel Scroll Slideshow3 vulnerabilities
- Horizontal Scrolling Announcement2 vulnerabilities
- Image Vertical Reel Scroll Slideshow2 vulnerabilities
- Jquery News Ticker2 vulnerabilities
- Message Ticker2 vulnerabilities
- Popup Contact Form2 vulnerabilities
- Wp Photo Text Slider 502 vulnerabilities
- Wp Tell A Friend Popup Form2 vulnerabilities
- Card Flip Image Slideshow1 vulnerabilities
- Continuous Announcement Scroller1 vulnerabilities
- Cool Fade Popup1 vulnerabilities
- Drop In Image Slideshow Gallery1 vulnerabilities
- Email Download Link1 vulnerabilities
- Horizontal Scroll Image Slideshow1 vulnerabilities
- Horizontal Scrolling Announcements1 vulnerabilities
- Iframe Images Gallery1 vulnerabilities
- Information Reel1 vulnerabilities
- Jquery Accordion Slideshow1 vulnerabilities
- Left Right Image Slideshow Gallery1 vulnerabilities
- New Simple Gallery1 vulnerabilities
- Onclick Show Popup1 vulnerabilities
- Owl Carousel Responsive1 vulnerabilities
- Pixelating Image Slideshow Gallery1 vulnerabilities
- Popup With Fancybox1 vulnerabilities
- Post Title Marquee Scroll1 vulnerabilities
- Scroll Post Excerpt1 vulnerabilities
- Superb Slideshow Gallery1 vulnerabilities
- Tiny Carosel Horizontal Slider1 vulnerabilities
- Tiny Carousel Horizontal Slider Plus1 vulnerabilities
- Twitter Real Time Search Scrolling1 vulnerabilities
- Up Down Image Slideshow Gallery1 vulnerabilities
- Vertical Marquee1 vulnerabilities
- Vertical Marquee Plugin1 vulnerabilities
- Vertical Scroll Image Slideshow Gallery1 vulnerabilities
- Vertical Scroll Recent Registered User1 vulnerabilities
- Vertical Scroll Slideshow Gallery V21 vulnerabilities
- Woo Superb Slideshow Transition Gallery With Random Effect1 vulnerabilities
- Wp Anything Slider1 vulnerabilities
- Wp Fade In Text News1 vulnerabilities
- Wp Image Slideshow1 vulnerabilities
CVE-2025-9199gopipluswoo superb slideshow transition gallery with random effect+1
EPSS score0.28%
The Woo superb slideshow transition gallery with random effect plugin for WordPress is vulnerable to SQL Injection via the 'woo-superb-slideshow' shortcode in all versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.CVE-2025-58881gopiplusnew simple gallery+1EPSS score0.27%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus New Simple Gallery new-simple-gallery allows Blind SQL Injection.This issue affects New Simple Gallery: from n/a through <= 8.0.CVE-2025-5590gopiplusowl carousel responsive+1EPSS score0.40%
The Owl carousel responsive plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.CVE-2025-5752gopiplusvertical scroll image slideshow gallery+1EPSS score0.27%
The Vertical scroll image slideshow gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 11.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2025-49897gopiplusvertical scroll slideshow gallery v2+1EPSS score0.42%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Vertical scroll slideshow gallery v2 allows Blind SQL Injection. This issue affects Vertical scroll slideshow gallery v2: from n/a through 9.1.CVE-2025-30983gopipluscard flip image slideshow+1EPSS score0.19%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus Card flip image slideshow card-flip-image-slideshow allows DOM-Based XSS.This issue affects Card flip image slideshow: from n/a through <= 1.5.CVE-2025-30969gopiplusiframe images gallery+1EPSS score0.29%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus iFrame Images Gallery wp-iframe-images-gallery allows SQL Injection.This issue affects iFrame Images Gallery: from n/a through <= 9.0.CVE-2025-30979gopipluspixelating image slideshow gallery+1EPSS score0.29%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Pixelating image slideshow gallery pixelating-image-slideshow-gallery allows SQL Injection.This issue affects Pixelating image slideshow gallery: from n/a through <= 8.0.CVE-2025-30533gopiplusmessage_ticker+1EPSS score0.38%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus Message ticker message-ticker allows Stored XSS.This issue affects Message ticker: from n/a through <= 9.3.CVE-2025-30947gopipluscool fade popup+1EPSS score0.29%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Cool fade popup cool-fade-popup allows Blind SQL Injection.This issue affects Cool fade popup: from n/a through <= 10.1.CVE-2022-46818gopi ramasamyemail posts to subscribers+2EPSS score0.65%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopi Ramasamy Email posts to subscribers allows SQL Injection.This issue affects Email posts to subscribers: from n/a through 6.2.CVE-2022-46819gopi ramasamycontinuous announcement scroller+2EPSS score0.39%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Continuous announcement scroller plugin <= 13.0 versions.CVE-2024-52492gopiplusimage_horizontal_reel_scroll_slideshow+1EPSS score0.32%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus Image horizontal reel scroll slideshow image-horizontal-reel-scroll-slideshow allows Stored XSS.This issue affects Image horizontal reel scroll slideshow: from n/a through <= 13.4.CVE-2024-51716gopiplustwitter real time search scrolling+1EPSS score0.29%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus Twitter real time search scrolling twitter-real-time-search-scrolling allows Reflected XSS.This issue affects Twitter real time search scrolling: from n/a through <= 7.0.CVE-2024-51914gopiplusdrop in image slideshow gallery+1EPSS score0.30%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus drop in image slideshow gallery drop-in-image-slideshow-gallery allows DOM-Based XSS.This issue affects drop in image slideshow gallery: from n/a through <= 12.0.CVE-2024-11884gopipluswp_photo_text_slider_50+1EPSS score0.35%
The Wp photo text slider 50 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp-photo-slider' shortcode in all versions up to, and including, 8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2024-11442gopiplushorizontal scroll image slideshow+1EPSS score0.45%
The Horizontal scroll image slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'horizontal-scroll-image-slideshow' shortcode in all versions up to, and including, 10.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2026-42713gopipluspost title marquee scroll+1EPSS score0.23%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopiplus Post title marquee scroll post-title-marquee-scroll allows Blind SQL Injection.This issue affects Post title marquee scroll: from n/a through 9.9.CVE-2023-40677gopi ramasamyvertical marquee plugin+2EPSS score0.40%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Vertical marquee plugin <= 7.1 versions.CVE-2023-41736gopi ramasamyemail posts to subscribers+2EPSS score0.36%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Email posts to subscribers plugin <= 6.2 versions.