PatchTheCVEwpchill vulnerabilities
Recent CVEs affecting wpchill products. 18 tracked.
wpchill has 18 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 18. Most recent: 2025-12-03. Highest priority: CVE-2024-12853 (score 45/100).
- CVE-2025-13645 HIGH 7.2 UPGRADE The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient fil
- CVE-2025-13646 HIGH 7.5 UPGRADE The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type
- CVE-2024-9416 MEDIUM 6.4 UPGRADE The Modula Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bu
- CVE-2024-8552 MEDIUM 4.3 UPGRADE The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
- CVE-2024-6571 MEDIUM 5.3 UPGRADE The Optimize Images ALT Text (alt tag) & names for SEO using AI plugin for WordPress is vulnerable to Full Pat
- CVE-2024-49256 MEDIUM 5.4 UPGRADE Incorrect Authorization vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Accessing F
- CVE-2024-47362 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials.This issue affects Str
- CVE-2024-3710 MEDIUM 6.8 UPGRADE The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.0 does not validate and escape some of it
- CVE-2024-3261 MEDIUM 4.8 UPGRADE The Strong Testimonials WordPress plugin before 3.1.12 does not validate and escape some of its Testimonial fi
- CVE-2024-32429 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPChill
- CVE-2024-30501 HIGH 7.6 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPChill
- CVE-2024-2026 MEDIUM 6.4 UPGRADE The Passster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's content_protec
- CVE-2024-1083 MEDIUM 5.3 UPGRADE The Simple Restrict plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to
- CVE-2024-12853 HIGH 8.8 UPGRADE The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type
- CVE-2024-11282 MEDIUM 5.3 UPGRADE The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to Sensitive Information
- CVE-2024-0616 MEDIUM 5.3 UPGRADE The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to Sensitive Information
- CVE-2023-6491 MEDIUM 4.3 UPGRADE The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to an impr
- CVE-2022-4972 HIGH 7.5 UPGRADE The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability ch
FAQ
How do I fix wpchill vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wpchill being exploited right now?
None of the tracked wpchill CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wpchill CVE should I patch first?
CVE-2024-12853 currently ranks highest (45/100): The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type.