Pluginscafe vulnerabilities
4 vulnerabilities
Known vulnerabilities in Pluginscafe products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- Address Autocomplete Via Google For Gravity Forms1 vulnerabilities
- Advanced Data Table For Elementor1 vulnerabilities
- Range Slider Addon For Gravity Forms1 vulnerabilities
- Smart Phone Field For Gravity Forms1 vulnerabilities
CVE-2025-53263pluginscafeaddress autocomplete via google for gravity forms+1
EPSS score0.15%
Cross-Site Request Forgery (CSRF) vulnerability in PluginsCafe Address Autocomplete via Google for Gravity Forms gf-google-address-autocomplete allows Cross Site Request Forgery.This issue affects Address Autocomplete via Google for Gravity Forms: from n/a through <= 1.3.4.CVE-2025-49905pluginscaferange slider addon for gravity forms+1EPSS score0.23%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginsCafe Range Slider Addon for Gravity Forms range-slider-addon-for-gravity-forms allows Reflected XSS.This issue affects Range Slider Addon for Gravity Forms: from n/a through <= 1.1.6.CVE-2024-54443pluginscafeadvanced data table for elementor+1EPSS score0.38%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginsCafe Advanced Data Table For Elementor advanced-data-table-for-elementor allows Stored XSS.This issue affects Advanced Data Table For Elementor: from n/a through <= 1.0.0.CVE-2024-13362100pluginsopen_user_map+262EPSS score0.28%
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.