WP Chill vulnerabilities
49 vulnerabilities
Known vulnerabilities in WP Chill products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 14 products.
Products
14- Strong Testimonials7 vulnerabilities
- Modula Image Gallery6 vulnerabilities
- Kali Forms5 vulnerabilities
- Passster5 vulnerabilities
- Download Monitor4 vulnerabilities
- Gallery Photoblocks4 vulnerabilities
- Image Photo Gallery Final Tiles Grid4 vulnerabilities
- Filr3 vulnerabilities
- Revive.So3 vulnerabilities
- RSVP And Event Management3 vulnerabilities
- Htaccess File Editor2 vulnerabilities
- Allegiant1 vulnerabilities
- Brilliance1 vulnerabilities
- Download Monitor Integration For Woocommerce1 vulnerabilities
CVE-2026-107436wp chillstrong testimonials
EPSS score0.36%
Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12.CVE-2026-110896wp chillpasssterEPSS score0.24%
Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18.CVE-2026-110375wp chilldownload monitorEPSS score0.16%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Download Monitor download-monitor allows Stored XSS.This issue affects Download Monitor: from n/a through 5.3.3.CVE-2026-109897wp chillstrong testimonialsEPSS score0.21%
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12.CVE-2026-110371wp chillstrong testimonialsEPSS score0.20%
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12.CVE-2026-109896wp chilldownload monitor integration for woocommerceEPSS score0.16%
Missing Authorization vulnerability in WP Chill Download Monitor integration for WooCommerce download-monitor-integration-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Monitor integration for WooCommerce: from n/a through 1.0.3.CVE-2025-59551wordpressrevive-so+1EPSS score0.24%
Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through <= 2.0.6.CVE-2025-26975wordpressstrong-testimonials+1EPSS score0.38%
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Strong Testimonials: from n/a through <= 3.2.3.CVE-2025-47439wordpressdownload-monitor+1EPSS score0.80%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Chill Download Monitor download-monitor allows PHP Local File Inclusion.This issue affects Download Monitor: from n/a through <= 5.0.22.CVE-2025-58610wordpressphotoblocks-grid-gallery+1EPSS score0.21%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through <= 1.3.1.CVE-2025-57926wordpresscontent-protector+1EPSS score0.23%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Passster content-protector allows Stored XSS.This issue affects Passster: from n/a through <= 4.2.18.CVE-2025-22773wordpresshtaccess-file-editor+1EPSS score0.36%
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through <= 1.0.19.CVE-2025-24683wordpressrsvp+1EPSS score0.58%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill RSVP and Event Management rsvp allows SQL Injection.This issue affects RSVP and Event Management: from n/a through <= 2.7.14.CVE-2025-64218wordpresscontent-protector+1EPSS score0.35%
Insertion of Sensitive Information Into Sent Data vulnerability in WP Chill Passster content-protector allows Retrieve Embedded Sensitive Data.This issue affects Passster: from n/a through <= 4.2.19.CVE-2025-64230wordpressfilr-protection+1EPSS score0.40%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Chill Filr filr-protection allows Path Traversal.This issue affects Filr: from n/a through <= 1.2.10.CVE-2025-32233wordpressrevive-so+1EPSS score0.43%
Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through <= 2.0.3.CVE-2024-47362wordpressstrong-testimonials+2EPSS score0.40%
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials.This issue affects Strong Testimonials: from n/a through <= 3.1.16.CVE-2024-43216wordpressfilr-protection+1EPSS score0.26%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Filr filr-protection.This issue affects Filr: from n/a through <= 1.2.4.CVE-2024-43329cpothemesallegiant+2EPSS score0.26%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Chill Allegiant allegiant allows Stored XSS.This issue affects Allegiant: from n/a through 1.2.7.CVE-2024-49256wordpresshtaccess-file-editor+2EPSS score0.37%
Incorrect Authorization vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Htaccess File Editor: from n/a through <= 1.0.18.