Suiteplugins - vulnerabilities (CVEs)
5 CVEs in 2 products, 0 in the last 30 days, newest from 2025-04-04.
Products
- Video Photo Gallery For Ultimate Member - 4 CVEs
- Login Widget For Ultimate Member - 1 CVEs
Newest CVEs of Suiteplugins
- CVE-2025-32121 - CVSS 7.6 (high), 2025-04-04: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member…
- CVE-2025-22672 - CVSS 4.9 (medium), 2025-03-27: Server-Side Request Forgery (SSRF) vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows Server Side…
- CVE-2025-30890 - CVSS 7.5 (high), 2025-03-27: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SuitePlugins Login Widget for…
- CVE-2024-54370 - CVSS 9.9 (critical), 2024-12-16: Unrestricted Upload of File with Dangerous Type vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows…
- CVE-2024-12162 - CVSS 6.1 (medium), 2024-12-12: The Video & Photo Gallery for Ultimate Member plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up…
