A WP Life vulnerabilities

🔔 Create alert RSS

Published CVEs affecting A WP Life products: 9 record(s), with severity, exploitation and fixes.

Blog Filter 2 Modal Popup Box 1 Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery 1 Login Page Customizer – Customizer Login Page, Admin Page, Custom Design 1 Contact Form Widget 1 Webenvo 1 Slider Responsive Slideshow – Image slider, Gallery slideshow 1 Responsive Slider Gallery 1

Exploited only (KEV) →

CVE-2026-94122 High · 7.2 CWE-502 Sep 30, 2026

WordPress Responsive Slider Gallery plugin <= 1.5.5 - PHP Object Injection vulnerability

Editor PHP Object Injection in Responsive Slider Gallery <= 1.5.5 versions.

CVE-2026-39589 Critical · 9.9 CWE-434 Jun 17, 2026

WordPress Webenvo theme <= 0.0.6 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions.

CVE-2026-39517 Medium · 6.5 CWE-79 Apr 8, 2026

WordPress Blog Filter plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Filter blog-filter allows DOM-Based XSS.This issue affects Blog Filter: from n/a through <= 1.7.6.

CVE-2026-22346 High · 8.8 CWE-502 Feb 20, 2026

WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.5.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow slider-responsive-slideshow allows Object Injection.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through <= 1.5.4.

CVE-2026-22345 High · 8.8 CWE-502 Feb 20, 2026

WordPress Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery plugin <= 1.6.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery new-image-gallery allows Object Injection.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through <= 1.6.0.

CVE-2025-68526 High · 8.8 CWE-502 Feb 20, 2026

WordPress Modal Popup Box plugin <= 1.6.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in A WP Life Modal Popup Box modal-popup-box allows Object Injection.This issue affects Modal Popup Box: from n/a through <= 1.6.1.

CVE-2025-62134 Medium · 5.4 CWE-352 Dec 31, 2025

WordPress Contact Form Widget plugin <= 1.5.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through <= 1.5.1.

CVE-2025-69033 Medium · 6.5 CWE-79 Dec 30, 2025

WordPress Blog Filter plugin <= 1.7.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Filter blog-filter allows DOM-Based XSS.This issue affects Blog Filter: from n/a through <= 1.7.3.

CVE-2025-49902 Medium · 6.5 CWE-862 Dec 18, 2025

WordPress Login Page Customizer – Customizer Login Page, Admin Page, Custom Design plugin <= 2.1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in A WP Life Login Page Customizer – Customizer Login Page, Admin Page, Custom Design customizer-login-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Page Customizer – Customizer Login Page, Admin Page, Custom Design: from n/a through <= 2.1.1.