Read the docs

PluginsCafe

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

PluginsCafe records in CISA KEV

No PluginsCafe vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-31820 CVE-2025-49905 · GHSA-c9jj-ghwx-hh7x

WordPress Range Slider Addon for Gravity Forms plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginsCafe Range Slider Addon for Gravity Forms range-slider-addon-for-gravity-forms allows Reflected XSS.This issue…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00228 Published 2025-11-06 No fix listed CWE-79
TI-2024-36529 CVE-2024-54443 · GHSA-hqgq-wgpj-wxwf

WordPress Advanced Data Table For Elementor plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginsCafe Advanced Data Table For Elementor advanced-data-table-for-elementor allows Stored XSS.This issue affects A…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00377 Published 2024-12-16 No fix listed CWE-79
TI-2024-12404 CVE-2024-13362 · GHSA-c7cj-88jr-mhx2

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

Priority LOW 27

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00276 Published 2026-05-01 No fix listed CWE-79
TI-2025-33230 CVE-2025-53263 · GHSA-c36x-7vrf-wx7q

Cross-site request forgery in PluginsCafe Address Autocomplete via Google for Gravity…

Priority LOW 23

Cross-Site Request Forgery (CSRF) vulnerability in PluginsCafe Address Autocomplete via Google for Gravity Forms gf-google-address-autocomplete allows Cross Site Request Forgery.This issue affects Address Autocomplete vi…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00154 Published 2025-06-27 No fix listed CWE-352
Open these records in search →