Vulnerabilities in gdragon
5 resultsCVE-2026-7635HIGHcoreActivity: Activity Logging for WordPress <= 3.0 - Unauthenticated PHP Object Injection via 'user_agent' Log Meta FieldEPSS 0.5%CVE-2023-3122HIGHGD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via EmailEPSS 0.5%CVE-2024-11278MEDIUMGD bbPress Attachments <= 4.7.2 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-11198MEDIUMGD Rating System <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class ParameterEPSS 0.4%CVE-2025-3436MEDIUMcoreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL InjectionEPSS 0.3%