Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GS Plugins — Vulnerabilities & Security Advisories 13

Browse all 13 CVE security advisories affecting GS Plugins. AI-powered Chinese analysis, POCs, and references for each vulnerability.

GS Plugins develops WordPress security and performance plugins with over 13 CVEs recorded. Their core offerings focus on hardening websites against attacks and optimizing site speed. Historically, vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and improper access controls. Notable security characteristics include regular security updates and a vulnerability disclosure program. While no major public incidents have been widely documented, their CVE history indicates consistent security challenges that require ongoing attention from users implementing their solutions.

CVE ID Title CVSS Severity Published
CVE-2025-62755 WordPress GS Portfolio for Envato plugin <= 1.4.2 - Broken Access Control vulnerability — GS Portfolio for Envato CWE-862 5.3 Medium 2025-12-31
CVE-2025-47526 WordPress GS Variation Swatches for WooCommerce plugin <= 3.0.4 - Broken Access Control Vulnerability — GS Variation Swatches for WooCommerce CWE-862 5.4 Medium 2025-05-07
CVE-2025-47481 WordPress GS Testimonial Slider plugin <= 3.2.9 - Content Injection vulnerability — GS Testimonial Slider CWE-94 5.3 Medium 2025-05-07
CVE-2025-47467 WordPress GS Testimonial Slider plugin <= 3.3.0 - Broken Access Control Vulnerability — GS Testimonial Slider CWE-862 4.3 Medium 2025-05-07
CVE-2024-56263 WordPress GS Shots for Dribbble plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability — GS Shots for Dribbble CWE-79 6.5 Medium 2025-01-02
CVE-2024-56261 WordPress Project Showcase plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability — Project Showcase CWE-79 6.5 Medium 2025-01-02
CVE-2024-56262 WordPress GS Coaches plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability — GS Coaches CWE-79 6.5 Medium 2025-01-02
CVE-2023-32593 WordPress GS Pins for Pinterest plugin <= 1.6.7 - Broken Access Control vulnerability — GS Pins for Pinterest CWE-862 5.4 Medium 2024-12-13
CVE-2024-30443 WordPress GS Testimonial Slider plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability — GS Testimonial Slider CWE-79 6.5 Medium 2024-03-29
CVE-2024-30192 WordPress Pinterest Plugin <= 1.8.2 - Cross Site Scripting (XSS) — GS Pins for Pinterest CWE-79 6.5 Medium 2024-03-27
CVE-2023-51530 WordPress GS Logo Slider Plugin <= 3.5.1 is vulnerable to Cross Site Request Forgery (CSRF) — Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation CWE-352 4.3 Medium 2024-02-29
CVE-2022-40213 WordPress GS Testimonial Slider plugin <= 1.9.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities — GS Testimonial Slider (WordPress plugin) CWE-79 4.1 Medium 2022-09-23
CVE-2022-35882 WordPress GS Testimonial Slider plugin <= 1.9.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability — GS Testimonial Slider (WordPress plugin) CWE-79 4.8 Medium 2022-07-28

This page lists every published CVE security advisory associated with GS Plugins. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.