VulnSea

WP Chill has 14 CVEs on record. Disclosure cadence is accelerating: 14 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 12. The median CVSS is 6.0 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-862 (7) and CWE-79 (6). Most affected products: strong-testimonials (6), content-protector (2), photoblocks-grid-gallery (2).

CVEs per month

Last 12 months, by publish date

111201020304050607080910
Exploited share
0% vs 1% corpus
Median CVSS
6.0
Publish → KEV
—
Last 90 days
14 prev 0

Products

  • strong-testimonials 6
  • content-protector 2
  • photoblocks-grid-gallery 2
  • download-monitor 1
  • download-monitor-integration-for-woocommerce 1
  • final-tiles-grid-gallery-lite 1
Follow WP Chill:RSS feedSave a search →Embed badge ↗
14
Total CVEs
0
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

WP Chill vulnerabilities

CVEs affecting WP Chill, newest first. Open any entry for full detail, references, and exploit status.

14 CVEsRSS

CVE-2026-114710Medium· 6.5
3d ago

WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through 1.3.7.

▾ SunlitWP Chill · photoblocks-grid-galleryEPSS 0.17%via CVEORG
CVE-2026-116408Medium· 6.5
3d ago

WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through 1.3.7.

▾ SunlitWP Chill · photoblocks-grid-galleryEPSS 0.17%via CVEORG
CVE-2026-112843Medium· 4.3
1w ago

WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.14.

▾ SunlitWP Chill · strong-testimonialsEPSS 0.20%via CVEORG
CVE-2026-107435High· 7.1
1w ago

WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12.

▾ TwilightWP Chill · strong-testimonialsEPSS 0.19%via CVEORG
CVE-2026-107436High· 8.8
1w ago

WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12.

▾ TwilightWP Chill · strong-testimonialsEPSS 0.44%via CVEORG
CVE-2026-110896Medium· 5.3PoC
1w ago

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18.

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18.

▾ TwilightWP Chill · content-protectorEPSS 0.23%via NVD
CVE-2026-110375Medium· 6.5
2w ago

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Download Monitor download-monitor allows Stored XSS.This issue affects Download Monitor: from n/a through 5.3.3.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Download Monitor download-monitor allows Stored XSS.This issue affects Download Monitor: from n/a through 5.3.3.

▾ SunlitWP Chill · download-monitorEPSS 0.16%via NVD
CVE-2026-109897Medium· 5.4
2w ago

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12.

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12.

▾ SunlitWP Chill · strong-testimonialsEPSS 0.21%via NVD
CVE-2026-110371Medium· 4.3
2w ago

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12.

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12.

▾ SunlitWP Chill · strong-testimonialsEPSS 0.20%via NVD
CVE-2026-109896Medium· 4.3
2w ago

Missing Authorization vulnerability in WP Chill Download Monitor integration for WooCommerce download-monitor-integration-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download…

Missing Authorization vulnerability in WP Chill Download Monitor integration for WooCommerce download-monitor-integration-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download…

▾ SunlitWP Chill · download-monitor-integration-for-woocommerceEPSS 0.16%via NVD
CVE-2026-105876Medium· 5.3
3w ago

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Retrieve Embedded Sensitive Data.This issue affects Modula Image Gallery: from n/a through 3.0.11.

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Retrieve Embedded Sensitive Data.This issue affects Modula Image Gallery: from n/a through 3.0.11.

▾ SunlitWP Chill · modula-best-grid-galleryEPSS 0.19%via NVD
CVE-2026-104409Medium· 6.5
3w ago

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Stored XSS.This issue affects Image Photo Gallery Fi…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Stored XSS.This issue affects Image Photo Gallery Fi…

▾ SunlitWP Chill · final-tiles-grid-gallery-liteEPSS 0.16%via NVD
CVE-2026-97286Medium· 6.5PoC
4w ago

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.11.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.11.

▾ TwilightWP Chill · strong-testimonialsEPSS 0.18%via NVD
CVE-2026-62114Medium· 5.3
1mo ago

WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Passster <= 4.3.13 versions.

▾ SunlitWP Chill · content-protectorEPSS 0.31%via CVEORG
WP Chill vulnerabilities (CVEs) · VulnSea