Vendor CVEs

Gopiplus

All CVEs

38 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-4999	Gopiplus Horizontal Scrolling Announcement	Hig	0.57	8.8	0.01	Oct 20, 2023	The Horizontal scrolling announcement plugin for WordPress is vulnerable to SQL Injection via the plugin's [horizontal-scrolling] shortcode in versions up to, and including, 9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…
CVE-2025-58881	Gopiplus New Simple Gallery	Hig	0.55	8.5	0.00	Sep 5, 2025	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus New Simple Gallery new-simple-gallery allows Blind SQL Injection.This issue affects New Simple Gallery: from n/a through <= 8.0.
CVE-2022-46818	Gopiplus Email Posts To Subscribers	Hig	0.53	8.2	0.01	Nov 3, 2023	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopi Ramasamy Email posts to subscribers allows SQL Injection.This issue affects Email posts to subscribers: from n/a through 6.2.
CVE-2023-5466	WordPress Wp anything slider	Hig	0.50	8.8	0.01	Nov 22, 2023	The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5465	WordPress Popup with fancybox	Hig	0.50	8.8	0.01	Nov 22, 2023	The Popup with fancybox plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5464	WordPress Jquery accordion slideshow	Hig	0.50	8.8	0.01	Oct 31, 2023	The Jquery accordion slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This…
CVE-2023-5439	WordPress Wp Photo Text Slider 50	Hig	0.50	8.8	0.01	Oct 31, 2023	The Wp photo text slider 50 plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes…
CVE-2023-5438	WordPress wp image slideshow	Hig	0.50	8.8	0.01	Oct 31, 2023	The wp image slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5437	WordPress WP fade in text news	Hig	0.50	8.8	0.01	Oct 31, 2023	The WP fade in text news plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5436	WordPress Vertical marquee plugin	Hig	0.50	8.8	0.01	Oct 31, 2023	The Vertical marquee plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5435	WordPress Up down image slideshow gallery	Hig	0.50	8.8	0.01	Oct 31, 2023	The Up down image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.…
CVE-2023-5434	WordPress Superb slideshow gallery	Hig	0.50	8.8	0.01	Oct 31, 2023	The Superb slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes…
CVE-2023-5433	WordPress Message Ticker	Hig	0.50	8.8	0.01	Oct 31, 2023	The Message ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5431	WordPress Left right image slideshow gallery	Hig	0.50	8.8	0.01	Oct 31, 2023	The Left right image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.…
CVE-2023-5430	WordPress Jquery news ticker	Hig	0.50	8.8	0.01	Oct 31, 2023	The Jquery news ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5429	WordPress Information Reel	Hig	0.50	8.8	0.01	Oct 31, 2023	The Information Reel plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5428	WordPress Image vertical reel scroll slideshow	Hig	0.50	8.8	0.01	Oct 31, 2023	The Image vertical reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.…
CVE-2023-5412	WordPress Image Horizontal Reel Scroll Slideshow	Hig	0.50	8.8	0.01	Oct 31, 2023	The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL…
CVE-2024-51914	WordPress Drop In Image Slideshow Gallery	Med	0.42	6.5	0.00	Nov 19, 2024	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus drop in image slideshow gallery drop-in-image-slideshow-gallery allows DOM-Based XSS.This issue affects drop in image slideshow gallery: from n/a through <= 12.0.
CVE-2023-5001	Gopiplus Horizontal Scrolling Announcement	Med	0.42	6.4	0.00	Sep 16, 2023	The Horizontal scrolling announcement plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'horizontal-scrolling' shortcode in versions up to, and including, 9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…
CVE-2023-45764	Gopiplus Scroll Post Excerpt	Med	0.38	5.9	0.00	Oct 25, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Scroll post excerpt plugin <= 8.0 versions.
CVE-2023-45051	Gopiplus Image Vertical Reel Scroll Slideshow	Med	0.38	5.9	0.00	Oct 18, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Image vertical reel scroll slideshow plugin <= 9.0 versions.
CVE-2023-44229	WordPress Tiny Carousel Horizontal Slider	Med	0.38	5.9	0.00	Oct 16, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Tiny Carousel Horizontal Slider plugin <= 8.1 versions.
CVE-2023-44265	Gopiplus Popup Contact Form	Med	0.38	5.9	0.00	Oct 2, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Popup contact form plugin <= 7.1 versions.
CVE-2023-44230	Gopiplus Popup Contact Form	Med	0.38	5.9	0.00	Oct 2, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Popup contact form plugin <= 7.1 versions.
CVE-2023-44228	Gopiplus Onclick Show Popup	Med	0.38	5.9	0.00	Oct 2, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Onclick show popup plugin <= 8.1 versions.
CVE-2023-41736	Gopiplus Email Posts To Subscribers	Med	0.38	5.9	0.00	Oct 2, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Email posts to subscribers plugin <= 6.2 versions.
CVE-2023-40677	Gopiplus Vertical Marquee	Med	0.38	5.9	0.00	Sep 27, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Vertical marquee plugin <= 7.1 versions.
CVE-2023-25465	Gopiplus Wp Tell A Friend Popup Form	Med	0.38	5.9	0.00	Sep 4, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy wp tell a friend popup form plugin <= 7.1 versions.
CVE-2023-24394	Iframe Project Iframe	Med	0.38	5.9	0.00	Aug 25, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy iframe popup plugin <= 3.3 versions.
CVE-2022-46819	Gopiplus Continuous Announcement Scroller	Med	0.38	5.9	0.00	May 10, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Continuous announcement scroller plugin <= 13.0 versions.
CVE-2023-24418	Gopiplus Tiny Carousel Horizontal Slider Plus	Med	0.38	5.9	0.00	May 10, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Tiny carousel horizontal slider plus plugin <= 3.2 versions.
CVE-2023-5432	WordPress Jquery news ticker	Med	0.35	6.4	0.00	Dec 19, 2023	The Jquery news ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'jquery-news-ticker' shortcode in versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for…
CVE-2023-5413	WordPress Image Horizontal Reel Scroll Slideshow	Med	0.35	6.4	0.00	Dec 19, 2023	The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'ihrss-gallery' shortcode in versions up to, and including, 13.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…
CVE-2023-47671	WordPress Vertical scroll recent post	Med	0.35	5.4	0.00	Nov 18, 2023	Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy Vertical scroll recent.This issue affects Vertical scroll recent post: from n/a through 14.0.
CVE-2023-25463	Gopiplus Wp Tell A Friend Popup Form	Med	0.35	5.4	0.00	Oct 3, 2023	Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy WP tell a friend popup form plugin <= 7.1 versions.
CVE-2023-36523	Gopiplus Email Download Link	Med	0.34	5.3	0.01	Nov 30, 2023	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gopi Ramasamy Email download link.This issue affects Email download link: from n/a through 3.7.
CVE-2023-41735	Gopiplus Email Posts To Subscribers	Med	0.34	5.3	0.01	Nov 30, 2023	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gopi Ramasamy Email posts to subscribers.This issue affects Email posts to subscribers: from n/a through 6.2.

CVE-2023-4999HigOct 20, 2023
Gopiplus
Horizontal Scrolling Announcement
risk 0.57cvss 8.8epss 0.01
The Horizontal scrolling announcement plugin for WordPress is vulnerable to SQL Injection via the plugin's [horizontal-scrolling] shortcode in versions up to, and including, 9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…
CVE-2025-58881HigSep 5, 2025
Gopiplus
New Simple Gallery
risk 0.55cvss 8.5epss 0.00
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus New Simple Gallery new-simple-gallery allows Blind SQL Injection.This issue affects New Simple Gallery: from n/a through <= 8.0.
CVE-2022-46818HigNov 3, 2023
Gopiplus
Email Posts To Subscribers
risk 0.53cvss 8.2epss 0.01
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopi Ramasamy Email posts to subscribers allows SQL Injection.This issue affects Email posts to subscribers: from n/a through 6.2.
CVE-2023-5466HigNov 22, 2023
WordPress
Wp anything slider
risk 0.50cvss 8.8epss 0.01
The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5465HigNov 22, 2023
WordPress
Popup with fancybox
risk 0.50cvss 8.8epss 0.01
The Popup with fancybox plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5464HigOct 31, 2023
WordPress
Jquery accordion slideshow
risk 0.50cvss 8.8epss 0.01
The Jquery accordion slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This…
CVE-2023-5439HigOct 31, 2023
WordPress
Wp Photo Text Slider 50
risk 0.50cvss 8.8epss 0.01
The Wp photo text slider 50 plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes…
CVE-2023-5438HigOct 31, 2023
WordPress
wp image slideshow
risk 0.50cvss 8.8epss 0.01
The wp image slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5437HigOct 31, 2023
WordPress
WP fade in text news
risk 0.50cvss 8.8epss 0.01
The WP fade in text news plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5436HigOct 31, 2023
WordPress
Vertical marquee plugin
risk 0.50cvss 8.8epss 0.01
The Vertical marquee plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5435HigOct 31, 2023
WordPress
Up down image slideshow gallery
risk 0.50cvss 8.8epss 0.01
The Up down image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.…
CVE-2023-5434HigOct 31, 2023
WordPress
Superb slideshow gallery
risk 0.50cvss 8.8epss 0.01
The Superb slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes…
CVE-2023-5433HigOct 31, 2023
WordPress
Message Ticker
risk 0.50cvss 8.8epss 0.01
The Message ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5431HigOct 31, 2023
WordPress
Left right image slideshow gallery
risk 0.50cvss 8.8epss 0.01
The Left right image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.…
CVE-2023-5430HigOct 31, 2023
WordPress
Jquery news ticker
risk 0.50cvss 8.8epss 0.01
The Jquery news ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5429HigOct 31, 2023
WordPress
Information Reel
risk 0.50cvss 8.8epss 0.01
The Information Reel plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…
CVE-2023-5428HigOct 31, 2023
WordPress
Image vertical reel scroll slideshow
risk 0.50cvss 8.8epss 0.01
The Image vertical reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.…
CVE-2023-5412HigOct 31, 2023
WordPress
Image Horizontal Reel Scroll Slideshow
risk 0.50cvss 8.8epss 0.01
The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL…
CVE-2024-51914MedNov 19, 2024
WordPress
Drop In Image Slideshow Gallery
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus drop in image slideshow gallery drop-in-image-slideshow-gallery allows DOM-Based XSS.This issue affects drop in image slideshow gallery: from n/a through <= 12.0.
CVE-2023-5001MedSep 16, 2023
Gopiplus
Horizontal Scrolling Announcement
risk 0.42cvss 6.4epss 0.00
The Horizontal scrolling announcement plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'horizontal-scrolling' shortcode in versions up to, and including, 9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…
CVE-2023-45764MedOct 25, 2023
Gopiplus
Scroll Post Excerpt
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Scroll post excerpt plugin <= 8.0 versions.
CVE-2023-45051MedOct 18, 2023
Gopiplus
Image Vertical Reel Scroll Slideshow
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Image vertical reel scroll slideshow plugin <= 9.0 versions.
CVE-2023-44229MedOct 16, 2023
WordPress
Tiny Carousel Horizontal Slider
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Tiny Carousel Horizontal Slider plugin <= 8.1 versions.
CVE-2023-44265MedOct 2, 2023
Gopiplus
Popup Contact Form
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Popup contact form plugin <= 7.1 versions.
CVE-2023-44230MedOct 2, 2023
Gopiplus
Popup Contact Form
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Popup contact form plugin <= 7.1 versions.
CVE-2023-44228MedOct 2, 2023
Gopiplus
Onclick Show Popup
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Onclick show popup plugin <= 8.1 versions.
CVE-2023-41736MedOct 2, 2023
Gopiplus
Email Posts To Subscribers
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Email posts to subscribers plugin <= 6.2 versions.
CVE-2023-40677MedSep 27, 2023
Gopiplus
Vertical Marquee
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Vertical marquee plugin <= 7.1 versions.
CVE-2023-25465MedSep 4, 2023
Gopiplus
Wp Tell A Friend Popup Form
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy wp tell a friend popup form plugin <= 7.1 versions.
CVE-2023-24394MedAug 25, 2023
Iframe Project
Iframe
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy iframe popup plugin <= 3.3 versions.
CVE-2022-46819MedMay 10, 2023
Gopiplus
Continuous Announcement Scroller
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Continuous announcement scroller plugin <= 13.0 versions.
CVE-2023-24418MedMay 10, 2023
Gopiplus
Tiny Carousel Horizontal Slider Plus
risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Tiny carousel horizontal slider plus plugin <= 3.2 versions.
CVE-2023-5432MedDec 19, 2023
WordPress
Jquery news ticker
risk 0.35cvss 6.4epss 0.00
The Jquery news ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'jquery-news-ticker' shortcode in versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for…
CVE-2023-5413MedDec 19, 2023
WordPress
Image Horizontal Reel Scroll Slideshow
risk 0.35cvss 6.4epss 0.00
The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'ihrss-gallery' shortcode in versions up to, and including, 13.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…
CVE-2023-47671MedNov 18, 2023
WordPress
Vertical scroll recent post
risk 0.35cvss 5.4epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy Vertical scroll recent.This issue affects Vertical scroll recent post: from n/a through 14.0.
CVE-2023-25463MedOct 3, 2023
Gopiplus
Wp Tell A Friend Popup Form
risk 0.35cvss 5.4epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy WP tell a friend popup form plugin <= 7.1 versions.
CVE-2023-36523MedNov 30, 2023
Gopiplus
Email Download Link
risk 0.34cvss 5.3epss 0.01
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gopi Ramasamy Email download link.This issue affects Email download link: from n/a through 3.7.
CVE-2023-41735MedNov 30, 2023
Gopiplus
Email Posts To Subscribers
risk 0.34cvss 5.3epss 0.01
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gopi Ramasamy Email posts to subscribers.This issue affects Email posts to subscribers: from n/a through 6.2.