WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
petitioner
Published
2026-03-27
Title
Petitioner < 0.7.4 - Missing Authorization
Slug
pets
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
pets
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
pets
Published
2025-08-06
Title
Pets <= 1.4.1 - Reflected Cross-Site Scripting
Slug
pf-timer
Published
2024-11-08
Title
PF Timer <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pgall-for-woocommerce
Published
2024-11-22
Title
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 < 5.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting pafw_instant_payment Shortcode
Slug
pgall-for-woocommerce
Published
2024-12-06
Title
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 < 5.2.3 - Reflected Cross-Site Scripting via add_query_arg Function
Slug
pgall-for-woocommerce
Published
2025-01-03
Title
워드프레스 결제 심플페이 < 5.2.2 - Authenticated (Contributor+) Local File Inclusion
Slug
pgall-for-woocommerce
Published
2025-05-07
Title
워드프레스 결제 심플페이 < 5.3.3 - Cross-Site Request Forgery
Slug
pgs-core
Published
2025-05-06
Title
PGS Core < 5.9.0 - Unauthenticated PHP Object Injection
Slug
pgs-core
Published
2025-05-06
Title
PGS Core < 5.9.0 - Missing Authorization via Multiple Functions
Slug
pgs-core
Published
2025-05-06
Title
PGS Core < 5.9.0 - Unauthenticated SQL Injection
Slug
pgs-core
Published
2025-09-26
Title
PGS Core <= 5.9.0 - Authenticated (Contributor+) SQL Injection
Slug
phastpress
Published
2021-03-19
Title
PhastPress < 1.111 - Open Redirect
Slug
phastpress
Published
2025-12-22
Title
PhastPress < 3.8 - Unauthenticated Arbitrary File Read via Null Byte Injection
Slug
philantro
Published
2024-12-17
Title
Philantro – Donations and Donor Management < 5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
philantro
Published
2025-01-27
Title
Philantro – Donations and Donor Management < 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via donate Shortcode
Slug
phoenix-media-rename
Published
2021-10-06
Title
Phoenix Media Rename < 3.4.4 - Author Arbitrary Media File Renaming
Slug
phone-orders-for-woocommerce
Published
2022-10-24
Title
Phone Orders for WooCommerce < 3.7.2 - Subscriber+ Sensitive Data Exposure
Slug
phonetrack-meu-site-manager
Published
2021-07-19
Title
PhoneTrack Meu Site Manager <= 0.1 - Authenticated Stored XSS
Slug
photo-block
Published
2025-12-15
Title
Photo Block < 1.6.0 - Missing Authorization
Slug
photo-contest
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Slug
photo-contest
Published
2021-07-16
Title
WordPress Photo Gallery – Image Gallery <= 1.0.6 - Cross-Site Request Forgery
Slug
photo-express-for-google
Published
2025-06-23
Title
Photo Express for Google <= 0.3.2 - Reflected Cross-Site Scripting
Slug
photo-feed
Published
2023-11-07
Title
Photo Feed <= 2.2.1 - Reflected XSS