Gdragon vulnerabilities
We track 2 vulnerabilities in Gdragon products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2026.
2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score
Latest Gdragon vulnerabilities
- 7.2 High severity
GD Rating System: Improper Neutralization of Input During Web Page Generation
The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This mak
- 8.1 High severity
coreActivity: Activity Logging for WordPress: Deserialization of Untrusted Data
The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0. This is due to the plugin failing to validate or strip PHP serialization syntax from the User-Agent HTTP head