WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
peepso-core
Published
2023-11-24
Title
Community by PeepSo < 6.2.7.0 - Reflected Cross-Site Scripting
Slug
peepso-core
Published
2023-11-20
Title
Community by PeepSo < 6.2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
peepso-core
Published
2024-01-09
Title
Community by PeepSo < 6.3.1.2 - Reflected XSS
Slug
peepso-core
Published
2024-01-09
Title
Community by PeepSo < 6.3.1.2 - User Post Creation via CSRF
Slug
peepso-core
Published
2024-02-14
Title
Community by PeepSo < 6.2.7.1 - Unauthenticated Sensitive Information Disclosure via Log file
Slug
peepso-core
Published
2024-09-09
Title
Community by PeepSo – Social Network, Membership, Registration, User Profiles < 6.4.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
peepso-core
Published
2024-09-09
Title
Community by PeepSo – Social Network, Membership, Registration, User Profiles < 6.4.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via content Parameter
Slug
peepso-core
Published
2024-09-24
Title
Community by PeepSo < 6.4.6.1 - Unauthenticated Full Path Disclosure
Slug
peepso-core
Published
2024-10-15
Title
Community by PeepSo < 6.4.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
peepso-core
Published
2024-11-20
Title
Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App <= 6.4.6.2 - Reflected Cross-Site Scripting
Slug
peepso-files
Published
2025-05-13
Title
PeepSo Core: File Uploads < 6.4.6.1 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via file_download
Slug
peepso-groups
Published
2025-07-02
Title
PeepSo Core: Groups < 6.4.6.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group Description
Slug
peepso-photos
Published
2024-01-16
Title
PeepSo Core: Photos < 6.3.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
peer-publish
Published
2025-11-24
Title
Peer Publish <= 1.0 - Cross-Site Request Forgery
Slug
pegapoll
Published
2024-10-25
Title
PegaPoll <= 1.0.2 - Unauthenticated Arbitrary Options Update
Slug
penci-ai
Published
2026-01-11
Title
Penci AI SmartContent Creator <= 2.0 - Missing Authorization
Slug
penci-bookmark-follow
Published
2025-10-14
Title
Penci Bookmark & Follow < 2.4 - Unauthenticated Stored Cross-Site Scripting
Slug
penci-data-migrator
Published
2024-05-16
Title
Penci Soledad Data Migrator < 1.3.1 - Unauthenticated Local File Inclusion
Slug
penci-data-migrator
Published
2026-03-12
Title
Penci Soledad Data Migrator <= 1.3.1 - Reflected Cross-Site Scripting
Slug
penci-filter-everything
Published
2025-09-22
Title
Penci Filter Everything < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
penci-filter-everything
Published
2026-01-11
Title
Penci Filter Everything <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
penci-pay-writer
Published
2026-01-14
Title
Penci Pay Writer <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
penci-podcast
Published
2025-09-22
Title
Penci Podcast < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
penci-podcast
Published
2026-01-11
Title
Penci Podcast <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
penci-portfolio
Published
2025-09-22
Title
Penci Portfolio < 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting