CVE Tools
Track your stack

Wpchill

18 CVEs tracked since 2022. Since Jan 2022, none of them reached CISA KEV.

Wpchill CVEs per month

Jan 2022 to Dec 2025. Point at a month, or focus the strip and use the arrow keys.
Wpchill CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2022-0140
2022-02null or fewer
2022-03null or fewer
2022-04null or fewer
2022-05null or fewer
2022-06null or fewer
2022-07null or fewer
2022-08null or fewer
2022-09null or fewer
2022-10null or fewer
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-02null or fewer
2023-03null or fewer
2023-04null or fewer
2023-05null or fewer
2023-0670
2023-07null or fewer
2023-08null or fewer
2023-09null or fewer
2023-10null or fewer
2023-11null or fewer
2023-12null or fewer
2024-01null or fewer
2024-02null or fewer
2024-03null or fewer
2024-04null or fewer
2024-05null or fewer
2024-06null or fewer
2024-07null or fewer
2024-08null or fewer
2024-09null or fewer
2024-10null or fewer
2024-11null or fewer
2024-12null or fewer
2025-01null or fewer
2025-02null or fewer
2025-03null or fewer
2025-04null or fewer
2025-05null or fewer
2025-06null or fewer
2025-07null or fewer
2025-08null or fewer
2025-09null or fewer
2025-10null or fewer
2025-11null or fewer
2025-1270

Products

The products that kept showing up in Wpchill's monthly top three, with their CVEs summed over those months.

  1. Download Monitor41 month
  2. Brilliance31 month
  3. Kali Forms — Contact Form & Drag-and-drop Builder31 month
  4. Image Gallery – Photo Grid & Video Gallery21 month
  5. Image Photo Gallery Final Tiles Grid21 month
  6. Modula Image Gallery21 month
  7. Affluent11 month
  8. Download Monitor (WordPress Plugin)11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Wpchill.

  1. CVE-2026-89406Modula Image Gallery <= 3.0.1 - Missing Authorization to Unauthenticated Private Gallery Image Disclosure via 'modula_gallery_id' and 'modula_image_id' Parameters7.5
  2. CVE-2026-92713Modula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameter8.1
  3. CVE-2026-92622Strong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute6.4
  4. CVE-2026-4559Image Photo Gallery Final Tiles Grid <= 3.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'delay' Shortcode Attribute6.4
  5. CVE-2026-16144Kali Forms <= 2.4.20 - Unauthenticated Remote Code Execution via 'thisPermalink' Field Parameter8.1
  6. CVE-2026-15395Kali Forms <= 2.4.18 - Unauthenticated Stored Cross-Site Scripting via 'digitalSignature' Field Value7.2
  7. CVE-2026-9107Kali Forms <= 2.4.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'kaliforms_field_components' Parameter6.4
  8. CVE-2026-3239Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode6.4
  9. CVE-2026-4401Download Monitor <= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and Disabling5.4
  10. CVE-2026-3124Download Monitor <= 5.1.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'7.5
  11. CVE-2026-3584Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process9.8
  12. CVE-2026-1860Kali Forms <= 2.4.8 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Form Data Exposure4.3
  13. CVE-2026-1254Modula Image Gallery – Photo Grid & Video Gallery <= 2.13.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post/Page Editing4.3
  14. CVE-2025-14865Passster – Password Protect Pages and Content <= 4.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4
  15. CVE-2025-15466Image Photo Gallery Final Tiles Grid <= 3.6.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Gallery Management5.4

The record

Peak rank
#99 in Jun 2023
Busiest month shown
Jun 2023, 7 CVEs
Months with a KEV entry
0 since Jan 2022
Monthly snapshots
3 since 2022
Wpchill's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store