Read the docs

gb-plugins

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

gb-plugins records in CISA KEV

No gb-plugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gb Gallery Slideshow 1 record LOW

Records

4 records

TI-2025-04844 CVE-2025-5392 · GHSA-h6cx-vg54-8g9q

GB Forms DB <= 1.0.2 - Unauthenticated Remote Code Execution

Priority MEDIUM 51

The GB Forms DB plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.2 via the gbfdb_talk_to_front() function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00978 Published 2025-07-11 No fix listed CWE-94
TI-2014-06886 CVE-2014-8375 · GHSA-wxrx-j593-qx6c

SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for…

Priority LOW 35

SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote administrators to execute arbitrary SQL commands via the selected_group parameter in a gb_ajax_get_group act…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0323 Published 2014-10-21 No fix listed CWE-89
TI-2025-22869 CVE-2025-31732 · GHSA-544j-rcj5-8jv9

WordPress GB Gallery Slideshow plugin <= 1.3 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in gb-plugins GB Gallery Slideshow gb-gallery-slideshow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GB Gallery Slideshow: from n/a throug…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00403 Published 2025-04-01 No fix listed CWE-862
Open these records in search →