WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
payplus-payment-gateway
Published
2026-06-29
Title
PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Payment Metadata Tampering
Slug
paytiko
Published
2025-07-03
Title
Paytiko for WooCommerce <= 1.4.6 - Missing Authorization
Slug
paytium
Published
2020-05-12
Title
Paytium < 3.1.2 - Stored Cross-Site Scripting (XSS)
Slug
paytium
Published
2022-11-30
Title
Paytium < 4.3.7 - Admin+ Stored XSS
Slug
paytium
Published
2024-02-12
Title
Paytium: Mollie payment forms & donations < 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
paytium
Published
2024-11-01
Title
Paytium < 4.4.11 - Missing Authorization
Slug
paytium
Published
2025-01-24
Title
Paytium < 4.4.12 - Unauthenticated Full Path Disclosure
Slug
paytium
Published
2026-06-23
Title
Paytium: Mollie payment forms & donations < 5.0.3 - Unauthenticated Privilege Escalation
Slug
paytm-donation
Published
2023-04-14
Title
Paytm Payment Donation < 2.2.1 - Reflected XSS
Slug
paytm-donation
Published
2025-02-03
Title
Paytm Payment Donation <= 2.3.3 - Admin+ Stored XSS
Slug
paytm-donation
Published
2025-01-05
Title
Paytm Payment Donation < 2.3.2 - Reflected Cross-Site Scripting
Slug
paytm-payments
Published
2023-02-22
Title
Paytm Payment Gateway < 2.7.7 - Editor+ SQLi
Slug
paytr-taksit-tablosu-woocommerce
Published
2023-11-20
Title
PayTR Taksit Tablosu < 1.3.2 - Unauthenticated Settings Update
Slug
paytr-taksit-tablosu-woocommerce
Published
2023-12-07
Title
PayTR Taksit Tablosu <= 1.3.4 - CSRF
Slug
payu-india
Published
2024-02-26
Title
PayU India < 3.8.9 - Reflected XSS via type
Slug
payu-india
Published
2025-01-06
Title
PayU CommercePro Plugin < 3.8.4 - Unauthenticated Privilege Escalation
Slug
payu-india
Published
2025-06-05
Title
PayU CommercePro Plugin < 3.8.8 - Authentication Bypass
Slug
payu-india
Published
2026-07-07
Title
PayU CommercePro < 3.9.0 - Unauthenticated Order Tampering
Slug
payu-india
Published
2026-07-22
Title
PayU CommercePro Plugin < 3.9.0 - Missing Authorization
Slug
pb-mailcrypt-antispam-email-encryption
Published
2024-04-29
Title
PB MailCrypt <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pb-oembed-html5-audio-with-cache-support
Published
2024-02-12
Title
PB oEmbed HTML5 Audio <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
pb-seo-friendly-images
Published
2023-03-15
Title
PB SEO Friendly Images <= 4.0.5 - Admin+ Stored XSS
Slug
pc-robotstxt
Published
2021-03-29
Title
Virtual Robots.txt < 1.10 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
pcloud-backup
Published
2025-04-01
Title
pCloud Backup <= 1.0.1 - Missing Authorization
Slug
pcloud-wp-backup
Published
2026-07-02
Title
pCloud WP Backup < 2.0.8 - Cross-Site Request Forgery