GS Plugins vulnerabilities

13 vulnerabilities

Known vulnerabilities in GS Plugins products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.

Products

9
5.3CVE-2025-62755gs pluginsgs portfolio for envato+1
EPSS score
0.21%
Missing Authorization vulnerability in GS Plugins GS Portfolio for Envato gs-envato-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Portfolio for Envato: from n/a through <= 1.4.2.
5.4CVE-2025-47526gs pluginsgs variation swatches for woocommerce+1
EPSS score
0.33%
Missing Authorization vulnerability in GS Plugins GS Variation Swatches for WooCommerce gs-woo-variation-swatches allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Variation Swatches for WooCommerce: from n/a through <= 3.0.4.
6.5CVE-2025-47481gs pluginsgs testimonial slider+1
EPSS score
0.36%
Improper Control of Generation of Code ('Code Injection') vulnerability in GS Plugins GS Testimonial Slider gs-testimonial allows Code Injection.This issue affects GS Testimonial Slider: from n/a through <= 3.2.9.
4.3CVE-2025-47467gs pluginsgs testimonial slider+1
EPSS score
0.29%
Missing Authorization vulnerability in GS Plugins GS Testimonial Slider gs-testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Testimonial Slider: from n/a through <= 3.3.0.
6.4CVE-2022-40213gs pluginsgs testimonial slider (wordpress plugin)+2
EPSS score
0.52%
Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in GS Testimonial Slider plugin <= 1.9.6 at WordPress.
6.4CVE-2022-35882gs pluginsgs testimonial slider (wordpress plugin)+2
EPSS score
0.59%
Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in GS Plugins GS Testimonial Slider plugin <= 1.9.5 at WordPress.
6.5CVE-2024-56262gs pluginsgs coaches+1
EPSS score
0.26%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Coaches gs-coach allows Stored XSS.This issue affects GS Coaches: from n/a through <= 1.1.0.
6.5CVE-2024-56263gs pluginsgs shots for dribbble+1
EPSS score
0.27%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Shots for Dribbble gs-dribbble-portfolio allows DOM-Based XSS.This issue affects GS Shots for Dribbble: from n/a through <= 1.2.0.
6.5CVE-2024-56261gs pluginsproject showcase+1
EPSS score
0.26%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins Project Showcase gs-projects allows Stored XSS.This issue affects Project Showcase: from n/a through <= 1.1.1.
6.5CVE-2024-30192gs pluginsgs pins for pinterest+2
EPSS score
0.27%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Pins for Pinterest allows Stored XSS.This issue affects GS Pins for Pinterest: from n/a through 1.8.2.
6.5CVE-2024-30443gs pluginsgs testimonial slider+1
EPSS score
0.36%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GS Plugins GS Testimonial Slider allows Stored XSS.This issue affects GS Testimonial Slider: from n/a through 3.1.4.
8.8CVE-2023-51530gs pluginslogo slider – logo showcase, logo carousel, logo gallery and client logo presentation+2
EPSS score
0.24%
Cross-Site Request Forgery (CSRF) vulnerability in GS Plugins Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation.This issue affects Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation: from n/a through 3.5.1.
5.4CVE-2023-32593gs pluginsgs pins for pinterest
EPSS score
0.45%
Missing Authorization vulnerability in GS Plugins GS Pins for Pinterest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Pins for Pinterest: from n/a through 1.6.7.