Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: gb-plugins Clear all filters
TI-2025-04844 CVE-2025-5392 · GHSA-h6cx-vg54-8g9q

GB Forms DB <= 1.0.2 - Unauthenticated Remote Code Execution

Priority MEDIUM 51

The GB Forms DB plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.2 via the gbfdb_talk_to_front() function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00978 Published 2025-07-11 No fix listed CWE-94
TI-2025-22869 CVE-2025-31732 · GHSA-544j-rcj5-8jv9

WordPress GB Gallery Slideshow plugin <= 1.3 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in gb-plugins GB Gallery Slideshow gb-gallery-slideshow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GB Gallery Slideshow: from n/a throug…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00403 Published 2025-04-01 No fix listed CWE-862
TI-2014-06886 CVE-2014-8375 · GHSA-wxrx-j593-qx6c

SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for…

Priority LOW 35

SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote administrators to execute arbitrary SQL commands via the selected_group parameter in a gb_ajax_get_group act…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0323 Published 2014-10-21 No fix listed CWE-89