WP Chill
Vulnerability activity for WP Chill: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 11
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 15
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 15
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 6.5MediumOct 29, 2026WP Chill Strong Testimonials XSSCVE-2026-114706Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.15.
- 6.5MediumOct 26, 2026WP Chill Gallery PhotoBlocks XSSCVE-2026-116408Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through 1.3.7.
- 6.5MediumOct 26, 2026WP Chill Gallery PhotoBlocks XSSCVE-2026-114710Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through 1.3.7.
- 4.3MediumOct 22, 2026WP Chill Strong Testimonials Auth bypass / access controlCVE-2026-112843Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.14.
- 7.1HighOct 21, 2026WP Chill Strong Testimonials XSSCVE-2026-107435Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12.
- 8.8HighOct 18, 2026WP Chill Strong Testimonials DeserializationCVE-2026-107436Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12.
- 5.3MediumOct 16, 2026WP Chill Passster Auth bypass / access controlCVE-2026-110896Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18.
- 6.5MediumOct 15, 2026WP Chill Download Monitor XSSCVE-2026-110375Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Download Monitor download-monitor allows Stored XSS.This issue affects Download Monitor: from n/a through 5.3.3.
- 5.4MediumOct 15, 2026WP Chill Strong Testimonials Auth bypass / access controlCVE-2026-109897Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12.
- 4.3MediumOct 15, 2026WP Chill Strong Testimonials Auth bypass / access controlCVE-2026-110371Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12.
- 4.3MediumOct 13, 2026WP Chill Download Monitor integration for WooCommerce Auth bypass / access controlCVE-2026-109896Missing Authorization vulnerability in WP Chill Download Monitor integration for WooCommerce download-monitor-integration-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Monitor integration for WooCommerce: from n/a through 1.0.3.
- 5.3MediumOct 7, 2026WP Chill Modula Image Gallery Auth bypass / access controlCVE-2026-105876Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Retrieve Embedded Sensitive Data.This issue affects Modula Image Gallery: from n/a through 3.0.11.
- 6.5MediumOct 5, 2026WP Chill Image Photo Gallery Final Tiles Grid XSSCVE-2026-104409Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Stored XSS.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.13.
- 6.5MediumSep 30, 2026WP Chill Strong Testimonials XSSCVE-2026-97286Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.11.
- 5.3MediumSep 11, 2026WP Chill Passster Auth bypass / access controlCVE-2026-62114Unauthenticated Broken Access Control in Passster <= 4.3.13 versions.
Top products
- Strong Testimonials7 CVEs in the last year
- Passster2 CVEs in the last year
- Gallery PhotoBlocks2 CVEs in the last year
- Modula Image Gallery1 CVE in the last year
- Image Photo Gallery Final Tiles Grid1 CVE in the last year
- Download Monitor integration for WooCommerce1 CVE in the last year
- Download Monitor1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.