Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

A WP Life — Vulnerabilities & Security Advisories 21

Browse all 21 CVE security advisories affecting A WP Life. AI-powered Chinese analysis, POCs, and references for each vulnerability.

A WP Life is a WordPress theme provider offering website templates for personal blogs and small business sites. Historically, the themes have been vulnerable to multiple security issues including remote code execution, cross-site scripting, and privilege escalation, with 19 CVEs recorded. Common vulnerabilities stem from insufficient input validation and improper access controls. Notable security characteristics include regular vulnerabilities in theme options and custom post types, with some instances allowing complete site compromise. While no major public incidents have been widely documented, the consistent pattern of vulnerabilities suggests potential risks for unpatched installations.

Top products by A WP Life: Contact Form Widget Album Gallery – WordPress Gallery Slider Responsive Slideshow – Image slider, Gallery slideshow Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery Blog Filter Event Monster – Event Management, Tickets Booking, Upcoming Event Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow Event Management Tickets Booking Right Click Disable OR Ban Login Page Customizer – Customizer Login Page, Admin Page, Custom Design Modal Popup Box Webenvo Responsive Slider Gallery
CVE ID Title CVSS Severity Published
CVE-2026-94122 WordPress Responsive Slider Gallery plugin <= 1.5.5 - PHP Object Injection vulnerability — Responsive Slider Gallery CWE-502 7.2 High 2026-09-30
CVE-2026-39589 WordPress Webenvo theme <= 0.0.6 - Arbitrary File Upload vulnerability — Webenvo CWE-434 9.9 Critical 2026-06-17
CVE-2026-39517 WordPress Blog Filter plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability — Blog Filter CWE-79 6.5 Medium 2026-04-08
CVE-2026-22346 WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.5.4 - PHP Object Injection vulnerability — Slider Responsive Slideshow – Image slider, Gallery slideshow CWE-502 8.8 High 2026-02-20
CVE-2026-22345 WordPress Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery plugin <= 1.6.0 - PHP Object Injection vulnerability — Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery CWE-502 8.8 High 2026-02-20
CVE-2025-68526 WordPress Modal Popup Box plugin <= 1.6.1 - PHP Object Injection vulnerability — Modal Popup Box CWE-502 8.8 High 2026-02-20
CVE-2025-62134 WordPress Contact Form Widget plugin <= 1.5.1 - Cross Site Request Forgery (CSRF) vulnerability — Contact Form Widget CWE-352 5.4 Medium 2025-12-31
CVE-2025-69033 WordPress Blog Filter plugin <= 1.7.3 - Cross Site Scripting (XSS) vulnerability — Blog Filter CWE-79 6.5 Medium 2025-12-30
CVE-2025-49902 WordPress Login Page Customizer – Customizer Login Page, Admin Page, Custom Design plugin <= 2.1.1 - Broken Access Control vulnerability — Login Page Customizer – Customizer Login Page, Admin Page, Custom Design CWE-862 6.5 Medium 2025-12-18
CVE-2025-47491 WordPress Contact Form Widget plugin <= 1.4.6 - Cross Site Request Forgery (CSRF) Vulnerability — Contact Form Widget CWE-352 7.4 High 2025-05-07
CVE-2025-39548 WordPress Right Click Disable OR Ban plugin <= 1.1.17 - CSRF to Stored XSS vulnerability — Right Click Disable OR Ban CWE-352 7.1 High 2025-04-16
CVE-2024-48037 WordPress Contact Form Widget plugin <= 1.4.2 - CSRF vulnerability — Contact Form Widget CWE-352 5.4 Medium 2024-10-17
CVE-2024-5059 WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability — Event Management Tickets Booking CWE-200 5.3 Medium 2024-06-21
CVE-2024-35717 WordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerability — Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow CWE-862 4.3 Medium 2024-06-10
CVE-2024-35720 WordPress Album Gallery – WordPress Gallery plugin <= 1.5.7 - Broken Access Control vulnerability — Album Gallery – WordPress Gallery CWE-862 4.3 Medium 2024-06-10
CVE-2024-35721 WordPress Image Gallery plugin <= 1.4.5 - Broken Access Control vulnerability — Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery CWE-862 4.3 Medium 2024-06-10
CVE-2024-35722 WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability — Slider Responsive Slideshow – Image slider, Gallery slideshow CWE-862 4.3 Medium 2024-06-10
CVE-2024-34754 WordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerability — Contact Form Widget CWE-200 5.3 Medium 2024-06-03
CVE-2024-34377 WordPress Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugin <= 1.5.3 - Broken Access Control vulnerability — Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery CWE-862 4.3 Medium 2024-05-06
CVE-2023-47525 WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS) — Event Monster – Event Management, Tickets Booking, Upcoming Event CWE-79 5.9 Medium 2023-12-21
CVE-2023-23646 WordPress Album Gallery – WordPress Gallery Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF) — Album Gallery – WordPress Gallery CWE-352 4.3 Medium 2023-07-17

This page lists every published CVE security advisory associated with A WP Life. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.