Gb-plugins vulnerabilities
We track 2 vulnerabilities in Gb-plugins products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 11, 2025.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest Gb-plugins vulnerabilities
- 9.8 Critical severity
GB Forms DB: Improper Control of Generation of Code
The GB Forms DB plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.2 via the gbfdb_talk_to_front() function. This is due to the function accepting user input and then passing that through call_user_func(). Thi
- 7.1 High severity
GB Gallery Slideshow: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gb-plugins GB Gallery Slideshow gb-gallery-slideshow allows Reflected XSS.This issue affects GB Gallery Slideshow: from n/a through <= 1.3.