Threat database

46 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.3%	CVE-2026-27398RSVP and Event Management · Missing Authorization Medium5.3EPSS 0.3%2026-05-25CVE Database V5CVE-2026-27398 Missing Authorization vulnerability in WP Chill RSVP and Event Management allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RSVP and Event Management: from n/a through 2.7.16. EPSS 0.3%Vulnerability WP Chill #cwe-862	CVE Database V5	2026-05-25
Medium	4.3	EPSS 0.3%	CVE-2026-27424Image Photo Gallery Final Tiles Grid · Missing Authorization Medium4.3EPSS 0.3%2026-05-20CVE Database V5CVE-2026-27424 Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11. EPSS 0.3%Vulnerability WP Chill #cwe-862	CVE Database V5	2026-05-20
Medium	5.3	EPSS 0.3%	CVE-2026-39561Revive.so · Missing Authorization Medium5.3EPSS 0.3%2026-04-08CVE Database V5CVE-2026-39561 Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through <= 2.0.7. EPSS 0.3%Vulnerability WP Chill	CVE Database V5	2026-04-08
Medium	5.3	EPSS 0.3%	CVE-2026-39536RSVP and Event Management · Exposure of Sensitive System Information to an Unauthorized Control Sphere in WP Chill RSVP and Event… Medium5.3EPSS 0.3%2026-04-08CVE Database V5CVE-2026-39536 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Sensitive Data.This issue affects RSVP and Event Management: from n/a through <= 2.7.16. EPSS 0.3%Vulnerability WP Chill	CVE Database V5	2026-04-08
Low	2.7	EPSS 0.3%	CVE-2026-39510Image Photo Gallery Final Tiles Grid · Authorization Bypass Through User-Controlled Key Low2.7EPSS 0.3%2026-04-08CVE Database V5CVE-2026-39510 Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through <= 3.6.11. EPSS 0.3%Vulnerability WP Chill	CVE Database V5	2026-04-08
High	8.5	EPSS 0.4%	CVE-2026-39486Download Monitor · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in WP Chill… High8.5EPSS 0.4%2026-04-08CVE Database V5CVE-2026-39486 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill Download Monitor download-monitor allows Blind SQL Injection.This issue affects Download Monitor: from n/a through <= 5.1.8. EPSS 0.4%Vulnerability WP Chill	CVE Database V5	2026-04-08
High	8.5	EPSS 0.4%	CVE-2026-28133Filr · Unrestricted Upload of File with Dangerous Type High8.5EPSS 0.4%2026-03-05CVE Database V5CVE-2026-28133 Unrestricted Upload of File with Dangerous Type vulnerability in WP Chill Filr filr-protection allows Upload a Web Shell to a Web Server.This issue affects Filr: from n/a through <= 1.2.14. EPSS 0.4%Vulnerability WP Chill	CVE Database V5	2026-03-05
Medium	4.3	EPSS 0.3%	CVE-2026-25375Image Photo Gallery Final Tiles Grid · Missing Authorization Medium4.3EPSS 0.3%2026-02-19CVE Database V5CVE-2026-25375 Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through <= 3.6.10. EPSS 0.3%Vulnerability WP Chill	CVE Database V5	2026-02-19
Medium	6.5	EPSS 0.3%	CVE-2026-25036Passster · Missing Authorization Medium6.5EPSS 0.3%2026-02-03CVE Database V5CVE-2026-25036 Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through <= 4.2.25. EPSS 0.3%Vulnerability WP Chill	CVE Database V5	2026-02-03
Medium	6.5	EPSS 0.3%	CVE-2026-24957Strong Testimonials · Missing Authorization Medium6.5EPSS 0.3%2026-02-03CVE Database V5CVE-2026-24957 Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through <= 3.2.20. EPSS 0.3%Vulnerability WP Chill	CVE Database V5	2026-02-03
Medium	4.3	EPSS 0.2%	CVE-2026-24939Modula Image Gallery · Missing Authorization Medium4.3EPSS 0.2%2026-02-03CVE Database V5CVE-2026-24939 Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modula Image Gallery: from n/a through <= 2.13.6. EPSS 0.2%Vulnerability WP Chill	CVE Database V5	2026-02-03
Medium	6.5	EPSS 0.2%	CVE-2026-24389Gallery PhotoBlocks · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WP Chill… Medium6.5EPSS 0.2%2026-01-22CVE Database V5CVE-2026-24389 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows DOM-Based XSS.This issue affects Gallery PhotoBlocks: from n/a through <= 1.3.2. EPSS 0.2%Vulnerability WP Chill	CVE Database V5	2026-01-22
Medium	5.9	EPSS 0.2%	CVE-2026-23976Modula Image Gallery · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WP Chill… Medium5.9EPSS 0.2%2026-01-22CVE Database V5CVE-2026-23976 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Stored XSS.This issue affects Modula Image Gallery: from n/a through <= 2.13.4. EPSS 0.2%Vulnerability WP Chill	CVE Database V5	2026-01-22
High	7.7	EPSS 0.4%	CVE-2025-64230Filr · Path Traversal High7.7EPSS 0.4%2025-12-18CVE Database V5CVE-2025-64230 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Chill Filr filr-protection allows Path Traversal.This issue affects Filr: from n/a through <= 1.2.10. EPSS 0.4%Vulnerability WP Chill	CVE Database V5	2025-12-18
High	7.5	EPSS 0.3%	CVE-2025-64218Passster · Insertion of Sensitive Information Into Sent Data High7.5EPSS 0.3%2025-12-18CVE Database V5CVE-2025-64218 Insertion of Sensitive Information Into Sent Data vulnerability in WP Chill Passster content-protector allows Retrieve Embedded Sensitive Data.This issue affects Passster: from n/a through <= 4.2.19. EPSS 0.3%Vulnerability WP Chill	CVE Database V5	2025-12-18
Medium	4.3	EPSS 0.2%	CVE-2025-59551Revive.so · Missing Authorization Medium4.3EPSS 0.2%2025-09-22CVE Database V5CVE-2025-59551 Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through <= 2.0.6. EPSS 0.2%Vulnerability WP Chill	CVE Database V5	2025-09-22
Medium	6.5	EPSS 0.2%	CVE-2025-57926Passster · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WP Chill… Medium6.5EPSS 0.2%2025-09-22CVE Database V5CVE-2025-57926 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Passster content-protector allows Stored XSS.This issue affects Passster: from n/a through <= 4.2.18. EPSS 0.2%Vulnerability WP Chill	CVE Database V5	2025-09-22
Medium	6.5	EPSS 0.2%	CVE-2025-58610Gallery PhotoBlocks · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WP Chill… Medium6.5EPSS 0.2%2025-09-03CVE Database V5CVE-2025-58610 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through <= 1.3.1. EPSS 0.2%Vulnerability WP Chill	CVE Database V5	2025-09-03
Medium	4.3	EPSS 0.4%	CVE-2025-32233Revive.so · Missing Authorization Medium4.3EPSS 0.4%2025-04-04CVE Database V5CVE-2025-32233 Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through <= 2.0.3. EPSS 0.4%Vulnerability WP Chill	CVE Database V5	2025-04-04
Medium	5.3	EPSS 0.4%	CVE-2025-26975Strong Testimonials · Missing Authorization Medium5.3EPSS 0.4%2025-02-25CVE Database V5CVE-2025-26975 Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Strong Testimonials: from n/a through <= 3.2.3. EPSS 0.4%Vulnerability WP Chill	CVE Database V5	2025-02-25

Showing 21–40 of 46 results