WP Chill vulnerabilities, page 3
49 vulnerabilities
Known vulnerabilities in WP Chill products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 14 products.
CVE-2026-24389wordpressphotoblocks-grid-gallery+1
EPSS score0.15%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows DOM-Based XSS.This issue affects Gallery PhotoBlocks: from n/a through <= 1.3.2.CVE-2026-24957wordpressstrong-testimonials+1EPSS score0.29%
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through <= 3.2.20.CVE-2026-24939wordpressmodula-best-grid-gallery+1EPSS score0.23%
Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modula Image Gallery: from n/a through <= 2.13.6.CVE-2026-28133wordpressfilr-protection+1EPSS score0.39%
Unrestricted Upload of File with Dangerous Type vulnerability in WP Chill Filr filr-protection allows Upload a Web Shell to a Web Server.This issue affects Filr: from n/a through <= 1.2.14.CVE-2026-81276wordpresskali-forms+1EPSS score0.29%
Unauthenticated Broken Access Control in Kali Forms <= 2.4.23 versions.CVE-2026-97286wordpressstrong-testimonials+1EPSS score0.15%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.11.CVE-2026-23976wordpressmodula-best-grid-gallery+1EPSS score0.20%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Stored XSS.This issue affects Modula Image Gallery: from n/a through <= 2.13.4.CVE-2023-46083wordpresskali-forms+1EPSS score0.36%
Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through <= 2.3.27.CVE-2023-45275wordpresskali-forms+1EPSS score0.46%
Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through <= 2.3.28.CVE-2023-28171wordpressbrilliance+2EPSS score0.38%
Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in WP Chill Brilliance theme <= 1.3.1 versions.