Vulnerabilities in gopiplus

29 results
Vexday analysis

Gopiplus apresenta 29 vulnerabilidades catalogadas, predominantemente relacionadas a injeção SQL (CWE-89), sem registros de exploração ativa ou críticas de severidade máxima. O portfólio de risco aparenta estar estabilizado, com nenhuma divulgação recente nos últimos 90 dias, sugerindo que as exposições são legadas e potencialmente já mitigadas em versões atuais.

CVE-2024-51914MEDIUMWordPress drop in image slideshow gallery plugin <= 12.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-9199MEDIUMWoo superb slideshow transition gallery with random effect <= 9.1 - Authenticated (Contributor+) SQL InjectionEPSS 0.3%CVE-2024-51716HIGHWordPress Twitter real time search scrolling plugin <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-58881HIGHWordPress New Simple Gallery Plugin <= 8.0 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-30947HIGHWordPress Cool fade popup plugin <= 10.1 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-30969HIGHWordPress iFrame Images Gallery plugin <= 9.0 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-30979HIGHWordPress Pixelating image slideshow gallery plugin <= 8.0 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-5752MEDIUMVertical scroll image slideshow gallery <= 11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via width ParameterEPSS 0.2%CVE-2025-30983MEDIUMWordPress Card flip image slideshow plugin <= 1.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%