WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
patron-button-and-widgets-by-codebard
Published
2024-04-29
Title
CodeBard's Patron Button and Widgets for Patreon <= 2.2.0 - Reflected Cross-Site Scripting
Slug
patterns-kit
Published
2026-08-10
Title
Patterns Kit <= 1.0.3 - Contributor+ Stored XSS via YouTube Popup Link
Slug
pay-addons-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
pay-per-media-player
Published
2014-04-25
Title
Pay Per Media Player <= 1.24 - Multiple XSS
Slug
pay-with-contact-form-7
Published
2025-04-04
Title
Pay with Contact Form 7 <= 1.0.4 - Authenticated (Administrator+) SQL Injection
Slug
pay-with-contact-form-7
Published
2025-06-05
Title
Pay with Contact Form 7 <= 1.0.4 - Cross-Site Request Forgery
Slug
pay-with-contact-form-7
Published
2025-07-07
Title
Pay with Contact Form 7 <= 1.0.4 - Reflected Cross-Site Scripting
Slug
pay-with-contact-form-7
Published
2026-08-19
Title
Pay with Contact Form 7 <= 1.0.4 - Unauthenticated Information Exposure
Slug
pay-with-tweet
Published
2014-08-01
Title
Pay With Tweet <= 1.1 - Multiple Vulnerabilities
Slug
pay-wp
Published
2026-07-16
Title
Autopay dla WooCommerce < 2.2.28 - Missing Authorization
Slug
payamito-sms-woocommerce
Published
2025-12-12
Title
افزونه پیامک ووکامرس فوق حرفه ای (جدید) payamito sms woocommerce <= 1.3.5 - Unauthenticated Time-Based Blind SQL Injection
Slug
payaza
Published
2025-12-04
Title
Payaza < 0.3.9 - Missing Authorization to Unauthenticated Order Status Update
Slug
payday
Published
2025-04-03
Title
Payday <= 3.3.18 - Missing Authorization
Slug
payerurl-crypto-currency-payment-gateway-for-woocommerce
Published
2026-06-10
Title
ABC Crypto Checkout < 1.8.3 - Unauthenticated Information Exposure
Slug
payflex-payment-gateway
Published
2024-07-10
Title
Payflex Payment Gateway < 2.6.0 - Missing Authorization to Order Status Update
Slug
payflex-payment-gateway
Published
2024-09-30
Title
Payflex Payment Gateway < 2.6.2 - Open Redirect
Slug
payform
Published
2025-01-16
Title
PayForm <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
paygreen-payment-gateway
Published
2025-01-06
Title
PayGreen Payment Gateway < 1.0.27 - Reflected Cross-Site Scripting
Slug
payhere-payment-gateway
Published
2023-12-07
Title
PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure
Slug
payhere-payment-gateway
Published
2026-01-13
Title
PayHere Payment Gateway Plugin for WooCommerce < 2.4.0 - Missing Authorization to Unauthenticated Order Status Modification
Slug
paymaya-checkout-for-woocommerce
Published
2025-07-16
Title
Maya Business < 1.3.0 - Unauthenticated Insecure Direct Object Reference
Slug
payment-form-for-paypal-pro
Published
2015-10-11
Title
Payment Form for PayPal Pro <= 1.0.1 - Multiple Reflected Cross-Site Scripting (XSS)
Slug
payment-form-for-paypal-pro
Published
2020-07-02
Title
Payment Form For Paypal Pro < 1.1.65 - Unauthenticated SQL Injection
Slug
payment-form-for-paypal-pro
Published
2025-04-17
Title
Payment Form for PayPal Pro < 1.1.73 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
payment-forms-for-paystack
Published
2024-02-07
Title
Payment Forms for Paystack < 4.0.0 - Contributor+ Stored XSS