Awordpresslife vulnerabilities
We track 7 vulnerabilities in Awordpresslife products across 7 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on July 4, 2025.
Latest Awordpresslife vulnerabilities
- 7.1 High severity
Neom Blog: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in awordpresslife Neom Blog neom-blog allows Reflected XSS.This issue affects Neom Blog: from n/a through <= 0.0.9.
- 7.2 High severity
Album Gallery: Deserialization of Untrusted Data
The Album Gallery – WordPress Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.3 via deserialization of untrusted input from gallery meta. This makes it possible for authenticated attackers, with Edit
- 7.5 High severity
Grid Gallery for Images: Deserialization of Untrusted Data
The Grid Gallery – Photo Image Grid Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.3 via deserialization via shortcode of untrusted input from the awl_gg_settings_ meta value. This makes it possible
- 7.5 High severity
Photo Gallery for Images: Deserialization of Untrusted Data
The Photo Gallery – Responsive Photo Gallery, Image Gallery, Portfolio Gallery, Logo Gallery And Team Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.2 via deserialization via shortcode of untrusted
- 7.5 High severity
Event Monster – Manager & Ticket Booking: Deserialization of Untrusted Data
The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.9 via deserialization via shortcode of untrusted input from a custom meta value. This mak
- 8.8 High severity
Modal Popup Box: Deserialization of Untrusted Data
The Modal Popup Box – Popup Builder, Show Offers And News in Popup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5.2 via deserialization of untrusted input in the awl_modal_popup_box_shortcode function. This
- 8.8 High severity
Responsive Slideshow: Deserialization of Untrusted Data
The Slider Responsive Slideshow – Image slider, Gallery slideshow plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.8 via deserialization of untrusted input to the awl_slider_responsive_shortcode function. Thi