WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pearl-header-builder
Published
2025-01-08
Title
Wordpress Header Builder Plugin < 1.3.9 - Cross-Site Request Forgery to Header Deletion
Slug
pearl-header-builder
Published
2025-04-01
Title
Pearl < 1.3.10 - Cross-Site Request Forgery
Slug
pearl-header-builder
Published
2025-04-01
Title
Pearl < 1.3.10 - Missing Authorization
Slug
pedalo-connector
Published
2024-10-10
Title
Pedalo Connector <= 2.0.5 - Authentication Bypass to Administrator
Slug
peekaboo
Published
2025-04-24
Title
Peekaboo <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
peepso-core
Published
2016-06-29
Title
PeepSo <= 1.6.0 - Authenticated Privilege Escalation
Slug
peepso-core
Published
2023-02-20
Title
Community by PeepSo < 6.0.3.0 - Multiple CSRF
Slug
peepso-core
Published
2023-11-16
Title
Community by PeepSo < 6.2.0.0 - Cross-Site Request Forgery via delete
Slug
peepso-core
Published
2023-11-24
Title
Community by PeepSo < 6.2.7.0 - Reflected Cross-Site Scripting
Slug
peepso-core
Published
2023-11-20
Title
Community by PeepSo < 6.2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
peepso-core
Published
2024-01-09
Title
Community by PeepSo < 6.3.1.2 - Reflected XSS
Slug
peepso-core
Published
2024-01-09
Title
Community by PeepSo < 6.3.1.2 - User Post Creation via CSRF
Slug
peepso-core
Published
2024-02-14
Title
Community by PeepSo < 6.2.7.1 - Unauthenticated Sensitive Information Disclosure via Log file
Slug
peepso-core
Published
2024-09-09
Title
Community by PeepSo – Social Network, Membership, Registration, User Profiles < 6.4.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
peepso-core
Published
2024-09-09
Title
Community by PeepSo – Social Network, Membership, Registration, User Profiles < 6.4.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via content Parameter
Slug
peepso-core
Published
2024-09-24
Title
Community by PeepSo < 6.4.6.1 - Unauthenticated Full Path Disclosure
Slug
peepso-core
Published
2024-10-15
Title
Community by PeepSo < 6.4.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
peepso-core
Published
2024-11-20
Title
Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App <= 6.4.6.2 - Reflected Cross-Site Scripting
Slug
peepso-files
Published
2025-05-13
Title
PeepSo Core: File Uploads < 6.4.6.1 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via file_download
Slug
peepso-groups
Published
2025-07-02
Title
PeepSo Core: Groups < 6.4.6.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group Description
Slug
peepso-photos
Published
2024-01-16
Title
PeepSo Core: Photos < 6.3.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
peer-publish
Published
2025-11-24
Title
Peer Publish <= 1.0 - Cross-Site Request Forgery
Slug
pegapoll
Published
2024-10-25
Title
PegaPoll <= 1.0.2 - Unauthenticated Arbitrary Options Update
Slug
penci-bookmark-follow
Published
2025-10-14
Title
Penci Bookmark & Follow < 2.4 - Unauthenticated Stored Cross-Site Scripting
Slug
penci-data-migrator
Published
2024-05-16
Title
Penci Soledad Data Migrator < 1.3.1 - Unauthenticated Local File Inclusion