plugin
4 known security issues reported for the Wp Guppy WordPress plugin. Most recent disclosed Jun 9, 2025.
Running Wp Guppy on your site? Check whether your installed version is affected.
Scan your site free[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech WP Guppy allows SQL Injection. This issue affects WP Guppy: from n/a through 4.3.3.
The WP Guppy plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 4.3.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above,...
[en] The WP Guppy WordPress plugin before 1.3 does not have any authorisation in some of the REST API endpoints, allowing any user to call them and could lead to sensitive information disclosure, such as usernames and chats between users, as well as be able to send messages as an arbitrary user
The WP Guppy WordPress plugin before 1.3 does not have any authorisation in some of the REST API endpoints, allowing any user to call them which could lead to sensitive information disclosure, such as usernames and chats between users, as well as being able to send messages as an arbitrary user.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free