Pricing
Solutions
WordPress security
Instantly fix and mitigate vulnerabilities
Plugin auditing
Paid auditing for WordPress vendors
Managed VDP
Start a security program for your plugins
Bug Bounty
Join the community and earn bounties
Enterprise API
At scale monitoring and vPatching for hosts
Vulnerability database
The latest WordPress security intelligence
Login
Start trial
Download Monitor
WP Chill
Developer
5.1.6
Latest version
90,000
Installations
Nov 6, 2025
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
22 fixed
4 Mitigation rules
Local File Inclusion Vulnerability
<= 5.0.22
May 7, 2025
Missing Authorization to Sensitive Information Exposure vulnerability
<= 5.0.13
Oct 29, 2024
Missing Authorization to API Key Manipulation vulnerability
<= 5.0.12
Oct 25, 2024
Missing Authorization to Authenticated (Subscriber+) Shop Enable vulnerability
<= 5.0.9
Sep 26, 2024
Missing Authorization vulnerability
<= 4.9.13
May 29, 2024
Auth. SQL Injection vulnerability
<= 4.9.4
Mar 28, 2024
Authenticated SQL Injection vulnerability
< 4.9.5
Jan 8, 2024
Arbitrary File Upload vulnerability
<= 4.8.3
Jun 13, 2023
Server Side Request Forgery (SSRF) vulnerability
<= 4.8.1
May 30, 2023
Sensitive Data Exposure vulnerability
<= 4.7.60
May 10, 2023
Authenticated Arbitrary File Download vulnerability
<= 4.5.97
Sep 19, 2022
Authenticated Arbitrary File Download vulnerability
<= 4.5.9
Jun 27, 2022
Authenticated Persistent Cross-Site Scripting (XSS) vulnerability
<= 4.4.6
Oct 29, 2021
Authenticated Arbitrary File Download vulnerability
<= 4.4.6
Oct 29, 2021
Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
<= 4.4.6
Oct 29, 2021
SQL Injection (SQLi) vulnerability
<= 4.4.4
Oct 20, 2021
Authenticated Directory Listing
<= 1.6.3
Aug 11, 2016
Cross Site Scripting
<= 1.7.0
May 15, 2015
XSS #1
<= 3.3.6.1
Aug 9, 2013
XSS #2
<= 3.3.6.1
Apr 22, 2013
Cross Site Scripting
<= 3.3.5.7
Aug 30, 2012
SQL Injection
<= 2.0.6
Apr 30, 2008