A WP Life vulnerabilities and threats

18 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.2	EPSS 0.4%	CVE-2026-94122Responsive Slider Gallery (WordPress plugin) · Deserialization of Untrusted Data High7.2EPSS 0.4%2026-09-30CVE Database V5CVE-2026-94122 Editor PHP Object Injection in Responsive Slider Gallery <= 1.5.5 versions. EPSS 0.4%Vulnerability A WP Life CWE-502	CVE Database V5	2026-09-30
Critical	9.9	EPSS 0.4%	CVE-2026-39589Webenvo (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.4%2026-06-17CVE Database V5CVE-2026-39589 Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions. EPSS 0.4%Vulnerability A WP Life CWE-434	CVE Database V5	2026-06-17
Medium	6.5	EPSS 0.2%	CVE-2026-39517Blog Filter (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-04-08CVE Database V5CVE-2026-39517 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Filter blog-filter allows DOM-Based XSS.This issue affects Blog Filter: from n/a through <= 1.7.6. EPSS 0.2%Vulnerability A WP Life	CVE Database V5	2026-04-08
High	8.8	EPSS 0.4%	CVE-2026-22346Slider Responsive Slideshow (WordPress plugin) · Deserialization of Untrusted Data High8.8EPSS 0.4%2026-02-20CVE Database V5CVE-2026-22346 Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow slider-responsive-slideshow allows Object Injection.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through <= 1.5.4. EPSS 0.4%Vulnerability A WP Life	CVE Database V5	2026-02-20
High	8.8	EPSS 0.4%	CVE-2026-22345Image Gallery (WordPress plugin) · Deserialization of Untrusted Data High8.8EPSS 0.4%2026-02-20CVE Database V5CVE-2026-22345 Deserialization of Untrusted Data vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery new-image-gallery allows Object Injection.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through <= 1.6.0. EPSS 0.4%Vulnerability A WP Life	CVE Database V5	2026-02-20
High	8.8	EPSS 0.6%	CVE-2025-68526Modal Popup Box (WordPress plugin) · Deserialization of Untrusted Data High8.8EPSS 0.6%2026-02-20CVE Database V5CVE-2025-68526 Deserialization of Untrusted Data vulnerability in A WP Life Modal Popup Box modal-popup-box allows Object Injection.This issue affects Modal Popup Box: from n/a through <= 1.6.1. EPSS 0.6%Vulnerability A WP Life	CVE Database V5	2026-02-20
Medium	5.4	EPSS 0.1%	CVE-2025-62134Contact Form Widget (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.1%2025-12-31CVE Database V5CVE-2025-62134 Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through <= 1.5.1. EPSS 0.1%Vulnerability A WP Life	CVE Database V5	2025-12-31
Medium	6.5	EPSS 0.2%	CVE-2025-69033Blog Filter (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-12-30CVE Database V5CVE-2025-69033 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Filter blog-filter allows DOM-Based XSS.This issue affects Blog Filter: from n/a through <= 1.7.3. EPSS 0.2%Vulnerability A WP Life	CVE Database V5	2025-12-30
Medium	6.5	EPSS 0.3%	CVE-2025-49902Login Page Customizer (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2025-12-18CVE Database V5CVE-2025-49902 Missing Authorization vulnerability in A WP Life Login Page Customizer – Customizer Login Page, Admin Page, Custom Design customizer-login-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Page Customizer – Customizer Login Page, Admin Page, Custom Design: from n/a through <= 2.1.1. EPSS 0.3%Vulnerability A WP Life	CVE Database V5	2025-12-18
High	7.1	EPSS 0.2%	CVE-2025-39548Right Click Disable OR Ban (WordPress plugin) · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.2%2025-04-16CVE Database V5CVE-2025-39548 Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Right Click Disable OR Ban right-click-disable-or-ban allows Stored XSS.This issue affects Right Click Disable OR Ban: from n/a through <= 1.1.17. EPSS 0.2%Vulnerability A WP Life	CVE Database V5	2025-04-16
Medium	5.4	EPSS 0.2%	CVE-2024-48037Contact Form Widget (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2024-10-17CVE Database V5CVE-2024-48037 Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through <= 1.4.2. EPSS 0.2%Vulnerability A WP Life	CVE Database V5	2024-10-17
Medium	5.3	EPSS 0.4%	CVE-2024-5059Event Management Tickets Booking (WordPress plugin) · Information Exposure Medium5.3EPSS 0.4%2024-06-21CVE Database V5CVE-2024-5059 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in A WP Life Event Management Tickets Booking.This issue affects Event Management Tickets Booking: from n/a through 1.4.0. EPSS 0.4%Vulnerability A WP Life CWE-200	CVE Database V5	2024-06-21
Medium	4.3	EPSS 0.4%	CVE-2024-35717Media Slider (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.4%2024-06-10CVE Database V5CVE-2024-35717 Missing Authorization vulnerability in A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow.This issue affects Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow: from n/a through 1.3.9. EPSS 0.4%Vulnerability A WP Life CWE-862	CVE Database V5	2024-06-10
Medium	4.3	EPSS 0.4%	CVE-2024-35720Album Gallery (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.4%2024-06-10CVE Database V5CVE-2024-35720 Missing Authorization vulnerability in A WP Life Album Gallery – WordPress Gallery.This issue affects Album Gallery – WordPress Gallery: from n/a through 1.5.7. EPSS 0.4%Vulnerability A WP Life CWE-862	CVE Database V5	2024-06-10
Medium	4.3	EPSS 0.4%	CVE-2024-35721Image Gallery (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.4%2024-06-10CVE Database V5CVE-2024-35721 Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through 1.4.5. EPSS 0.4%Vulnerability A WP Life CWE-862	CVE Database V5	2024-06-10
Medium	4.3	EPSS 0.4%	CVE-2024-35722Slider Responsive Slideshow (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.4%2024-06-10CVE Database V5CVE-2024-35722 Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0. EPSS 0.4%Vulnerability A WP Life CWE-862	CVE Database V5	2024-06-10
Medium	5.3	EPSS 0.3%	CVE-2024-34754Contact Form Widget (WordPress plugin) · Information Exposure Medium5.3EPSS 0.3%2024-06-03CVE Database V5CVE-2024-34754 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in A WP Life Contact Form Widget.This issue affects Contact Form Widget: from n/a through 1.3.9. EPSS 0.3%Vulnerability A WP Life CWE-200	CVE Database V5	2024-06-03
Medium	4.3	EPSS 0.4%	CVE-2024-34377Video Gallery (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.4%2024-05-06CVE Database V5CVE-2024-34377 Missing Authorization vulnerability in A WP Life Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery.This issue affects Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery: from n/a through 1.5.3. EPSS 0.4%Vulnerability A WP Life CWE-862	CVE Database V5	2024-05-06

Page 1 of 1