gdragon vulnerabilities
6 published CVEs name gdragon among the affected products.
- Published CVEs
- 6
- Last 12 months
- 2
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20231
- 20242
- 20251
- 20262
Newest CVEs
- CVE-2026-93430
GD Rating System <= 3.7.1 - Unauthenticated Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX
gdragon · GD Rating System
High7.2 - CVE-2026-7635
coreActivity: Activity Logging for WordPress <= 3.0 - Unauthenticated PHP Object Injection via 'user_agent' Log Meta Field
gdragon · coreActivity: Activity Logging for WordPress
High8.1 - CVE-2025-3436
coreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL Injection
gdragon · coreActivity: Activity Logging for WordPress
Medium6.5 - CVE-2024-11278
GD bbPress Attachments <= 4.7.2 - Reflected Cross-Site Scripting
gdragon · GD bbPress Attachments
Medium6.1 - CVE-2024-11198
GD Rating System <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class Parameter
gdragon · GD Rating System
Medium6.4 - CVE-2023-3122
GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Email
gdragon · GD Mail Queue
High7.2