Read the docs

gopiplus

Records58All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9

Exploited now

gopiplus records in CISA KEV

No gopiplus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

58 records

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopi Ramasamy Email posts to subscribers allows SQL Injection.This issue affects Email posts to subscribers: from n/a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00652 Published 2023-11-03 No fix listed CWE-89
Priority MEDIUM 44

The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.2 due to insufficient escaping on the user supplied parameter…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01886 Published 2023-10-31 No fix listed CWE-89
Priority MEDIUM 42

The Wp anything slider plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficie…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01017 Published 2023-11-22 No fix listed CWE-89
Priority MEDIUM 42

The Popup with fancybox plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.5 due to insufficient escaping on the user supplied parameter and lack of suffici…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00995 Published 2023-11-22 No fix listed CWE-89
Priority MEDIUM 42

The Jquery accordion slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.1 due to insufficient escaping on the user supplied parameter and lack of…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01039 Published 2023-10-31 No fix listed CWE-89
Priority MEDIUM 42

The Wp photo text slider 50 plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.0 due to insufficient escaping on the user supplied parameter and lack of suf…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01039 Published 2023-10-31 No fix listed CWE-89
Priority MEDIUM 42

The wp image slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of suffici…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01039 Published 2023-10-31 No fix listed CWE-89
Priority MEDIUM 42

The WP fade in text news plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of suffi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01039 Published 2023-10-31 No fix listed CWE-89
Priority MEDIUM 42

The Vertical marquee plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01039 Published 2023-10-31 No fix listed CWE-89
Priority MEDIUM 42

The Up down image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and la…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01039 Published 2023-10-31 No fix listed CWE-89
Priority MEDIUM 42

The Superb slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.1 due to insufficient escaping on the user supplied parameter and lack of s…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01039 Published 2023-10-31 No fix listed CWE-89
Priority MEDIUM 42

The Message ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient p…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01026 Published 2023-10-31 No fix listed CWE-89
Priority MEDIUM 42

The Left right image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01026 Published 2023-10-31 No fix listed CWE-89
Priority MEDIUM 42

The Jquery news ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficie…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01026 Published 2023-10-31 No fix listed CWE-89
Priority MEDIUM 42

The Information Reel plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 10.0 due to insufficient escaping on the user supplied parameter and lack of sufficien…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01026 Published 2023-10-31 No fix listed CWE-89
Priority MEDIUM 42

The Image vertical reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0 due to insufficient escaping on the user supplied parameter an…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01026 Published 2023-10-31 No fix listed CWE-89
Priority MEDIUM 42

The Horizontal scrolling announcement plugin for WordPress is vulnerable to SQL Injection via the plugin's [horizontal-scrolling] shortcode in versions up to, and including, 9.2 due to insufficient escaping on the user s…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00925 Published 2023-10-20 No fix listed CWE-89
Priority MEDIUM 41

The Horizontal scrolling announcements plugin for WordPress is vulnerable to SQL Injection via the plugin's 'hsas-shortcode' shortcode in versions up to, and including, 2.4 due to insufficient escaping on the user suppli…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00613 Published 2024-08-06 No fix listed CWE-89
Priority MEDIUM 40

The Owl carousel responsive plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.9 due to insufficient escaping on the user supplied parameter and…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00413 Published 2025-06-26 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Pixelating image slideshow gallery pixelating-image-slideshow-gallery allows SQL Injection.This issue affects…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00302 Published 2025-07-04 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus iFrame Images Gallery wp-iframe-images-gallery allows SQL Injection.This issue affects iFrame Images Gallery:…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00302 Published 2025-07-04 No fix listed CWE-89
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Cool fade popup cool-fade-popup allows Blind SQL Injection.This issue affects Cool fade popup: from n/a throu…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00302 Published 2025-07-04 No fix listed CWE-89
Load more
Open these records in search →