WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Gwolle Guestbook

Gwolle Guestbook is the WordPress guestbook you've just been looking for. Beautiful and easy.

6Reported vulnerabilities
9Highest CVSS score
5.0.2Latest version
20,000+Active installs

What to do now

Update Gwolle Guestbook to 4.9.3 or later. 6 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 23, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2015-8351 Critical 9 37.0% 1.5.3 and earlier 1.5.4 September 11, 2017
CVE-2018-17884 Medium 6.1 1.2% Before 2.5.4 2.5.4 October 2, 2018
WF-ed61a6b5-5c54-408b-973c-69b0f12d2df5 High 8.8 — 2.1.0 and earlier 2.1.1 March 1, 2017
CVE-2025-5807 Medium 6.1 0.2% 4.9.2 and earlier 4.9.3 July 9, 2025
CVE-2025-24710 Medium 6.1 0.3% 4.7.1 and earlier 4.7.2 January 31, 2025
WF-96f1ede7-ec36-4edf-baee-5e41907290af Medium 6.1 — 2.1.0 and earlier 2.1.1 March 1, 2017

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.