CveMateVulnerability intelligence

WP Chill vulnerabilities, page 2

49 vulnerabilities

Known vulnerabilities in WP Chill products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 14 products.

CVE-2024-49256wordpresshtaccess-file-editor+21y ago01-11-2024 14:18

Incorrect Authorization vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Htaccess File Editor: from n/a through <= 1.0.18.CVE-2026-105876wordpressmodula-best-grid-gallery+113d ago07-10-2026 09:16

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Retrieve Embedded Sensitive Data.This issue affects Modula Image Gallery: from n/a through 3.0.11.CVE-2026-84781wordpressphotoblocks-grid-gallery+11mo ago02-09-2026 11:37

Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.4 versions.CVE-2026-59542wordpresskali-forms+12mo ago23-07-2026 11:18

Subscriber Arbitrary File Deletion in Kali Forms <= 2.4.18 versions.CVE-2026-65446wordpresskali-forms+12mo ago27-07-2026 22:44

Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.CVE-2026-65475wordpressmodula-best-grid-gallery+12mo ago23-07-2026 11:53

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30.CVE-2026-62114wordpresscontent-protector+11mo ago11-09-2026 18:12

Unauthenticated Broken Access Control in Passster <= 4.3.13 versions.CVE-2026-42688wordpressmodula-best-grid-gallery+14mo ago15-06-2026 20:18

Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions.CVE-2026-39561wordpressrevive-so+16mo ago08-04-2026 08:30

Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through <= 2.0.7.CVE-2026-39481wordpressmodula-best-grid-gallery+14mo ago15-06-2026 20:17

Author PHP Object Injection in Modula Image Gallery <= 2.14.18 versions.CVE-2026-39489wordpressdownload-monitor+14mo ago15-06-2026 20:17

Author Arbitrary File Download in Download Monitor <= 5.1.9 versions.CVE-2026-39536wordpressrsvp+16mo ago08-04-2026 08:30

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Sensitive Data.This issue affects RSVP and Event Management: from n/a through <= 2.7.16.CVE-2026-39486wordpressdownload-monitor+16mo ago08-04-2026 08:30

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill Download Monitor download-monitor allows Blind SQL Injection.This issue affects Download Monitor: from n/a through <= 5.1.8.CVE-2026-39510wordpressfinal-tiles-grid-gallery-lite+16mo ago08-04-2026 08:30

Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through <= 3.6.11.CVE-2026-25036wordpresscontent-protector+18mo ago03-02-2026 14:08

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through <= 4.2.25.CVE-2026-25375wordpressfinal-tiles-grid-gallery-lite+18mo ago19-02-2026 08:27

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through <= 3.6.10.CVE-2026-66448wordpressphotoblocks-grid-gallery+12mo ago27-07-2026 13:59

Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions.CVE-2026-27398wordpressrsvp+14mo ago25-05-2026 21:56

Missing Authorization vulnerability in WP Chill RSVP and Event Management allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RSVP and Event Management: from n/a through 2.7.16.CVE-2026-27424wordpressfinal-tiles-grid-gallery-lite+15mo ago20-05-2026 12:13

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11.CVE-2026-104409wordpressfinal-tiles-grid-gallery-lite+116d ago05-10-2026 08:06

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Stored XSS.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.13.