WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pearl-header-builder
Published
2025-04-01
Title
Pearl < 1.3.10 - Cross-Site Request Forgery
Slug
pearl-header-builder
Published
2025-04-01
Title
Pearl < 1.3.10 - Missing Authorization
Slug
pedalo-connector
Published
2024-10-10
Title
Pedalo Connector <= 2.0.5 - Authentication Bypass to Administrator
Slug
peekaboo
Published
2025-04-24
Title
Peekaboo <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
peepso
Published
2026-10-06
Title
PeepSo <= 9.0.5.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
peepso-core
Published
2016-06-29
Title
PeepSo <= 1.6.0 - Authenticated Privilege Escalation
Slug
peepso-core
Published
2023-02-20
Title
Community by PeepSo < 6.0.3.0 - Multiple CSRF
Slug
peepso-core
Published
2023-11-16
Title
Community by PeepSo < 6.2.0.0 - Cross-Site Request Forgery via delete
Slug
peepso-core
Published
2023-11-24
Title
Community by PeepSo < 6.2.7.0 - Reflected Cross-Site Scripting
Slug
peepso-core
Published
2023-11-20
Title
Community by PeepSo < 6.2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
peepso-core
Published
2024-01-09
Title
Community by PeepSo < 6.3.1.2 - Reflected XSS
Slug
peepso-core
Published
2024-01-09
Title
Community by PeepSo < 6.3.1.2 - User Post Creation via CSRF
Slug
peepso-core
Published
2024-02-14
Title
Community by PeepSo < 6.2.7.1 - Unauthenticated Sensitive Information Disclosure via Log file
Slug
peepso-core
Published
2024-09-09
Title
Community by PeepSo – Social Network, Membership, Registration, User Profiles < 6.4.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
peepso-core
Published
2024-09-09
Title
Community by PeepSo – Social Network, Membership, Registration, User Profiles < 6.4.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via content Parameter
Slug
peepso-core
Published
2024-09-24
Title
Community by PeepSo < 6.4.6.1 - Unauthenticated Full Path Disclosure
Slug
peepso-core
Published
2024-10-15
Title
Community by PeepSo < 6.4.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
peepso-core
Published
2024-11-20
Title
Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App <= 6.4.6.2 - Reflected Cross-Site Scripting
Slug
peepso-core
Published
2026-08-19
Title
Community by PeepSo – Download from PeepSo.com < 9.0.5.3 - Authenticated (Subscriber+) SQL Injection
Slug
peepso-files
Published
2025-05-13
Title
PeepSo Core: File Uploads < 6.4.6.1 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via file_download
Slug
peepso-groups
Published
2025-07-02
Title
PeepSo Core: Groups < 6.4.6.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group Description
Slug
peepso-photos
Published
2024-01-16
Title
PeepSo Core: Photos < 6.3.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
peer-publish
Published
2025-11-24
Title
Peer Publish <= 1.0 - Cross-Site Request Forgery
Slug
pegapoll
Published
2024-10-25
Title
PegaPoll <= 1.0.2 - Unauthenticated Arbitrary Options Update
Slug
penci-ai
Published
2026-01-11
Title
Penci AI SmartContent Creator <= 2.0 - Missing Authorization